CVE-2019-13420

Medium

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

floragunn·CWE-208·Published 2019-08-13

CVSS

5.9

EPSS

0.01

KEV

Exploits

cve.orgen

105 chars

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

NVDen

105 chars

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

NVDes

149 chars

Las versiones de Search Guard anteriores a 21.0 tenían un problema de canal secundario de temporización al usar la base de datos interna de usuarios.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N