Описание
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat OpenShift Container Platform 3.10 | openshift-elasticsearch-plugin | Not affected | ||
| Red Hat OpenShift Container Platform 3.11 | openshift3/ose-logging-elasticsearch5 | Fix deferred | ||
| Red Hat OpenShift Container Platform 3.9 | openshift-elasticsearch-plugin | Not affected | ||
| Red Hat OpenShift Container Platform 3.9 | search-guard-2 | Not affected | ||
| Red Hat OpenShift Container Platform 4 | openshift4/ose-logging-elasticsearch5 | Fix deferred |
Показывать по
10
Дополнительная информация
Статус:
Low
Дефект:
CWE-200
https://bugzilla.redhat.com/show_bug.cgi?id=1758296search-guard: aggregations clear text values of anonymised fields were leaked
EPSS
Процентиль: 57%
0.00934
Низкий
5.3 Medium
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
около 7 лет назад
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.
CVSS3: 7.5
github
больше 4 лет назад
Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.
EPSS
Процентиль: 57%
0.00934
Низкий
5.3 Medium
CVSS3