CVE-2019-13421
Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.
Published: 2019-08-23 · CVSS: Unscored
Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7