CVE-2019-13420 Security Details

CVE ID

CVE-2019-13420

CWE

CWE-203

CWE-208

CVE Description

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

Published

Aug 14, 2019

CVSS Score & Severity

5.9Medium

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.281%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Vulnerable Methods

com/floragunn/searchguard/user/AuthCredentials.equals(Ljava/lang/Object;)Z

JVMVulnerable params: 0

Affected Ecosystems

affected

Source

National Vulnerability Database

References

search-guard.comPROJECT

GitHub · Issue #439PROJECT

search-guard.comPROJECT