Description (CNA)
In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| floragunn / Search Guard FLX | affected 1.0.0 through 4.0.1 |
CWE
CWE-532, CWE-522
References
- https://search-guard.com/cve-advisory/
- https://docs.search-guard.com/latest/changelog-searchguard-flx-4_1_0
ADP enrichment
No English description supplied.
No references supplied.