UpHeron
All vulnerabilities

Servers and applications

CVE-2019-7619

Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.

Severity
Medium 5.3
Published
30 Oct 2019
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
ElasticsearchServers and applications · cpe:a:elastic:elasticsearch
  • From 6.7.0 up to 6.8.3
  • From 7.0.0 up to 7.3.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-7619
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-7619