CVE-2019-13420

CVE-2019-13420

Vendor Floragunn

Product Search Guard

Weakness CWE-208

Published August 13, 2019

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Search Guard versions before 21.0 had an timing side channel issue when using the internal user database.

Key dates

02Disclosure timeline

August 13, 2019 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-13420 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/208.html

Related vulnerabilities

04Related CVE

CVE-2022-42288 CVE-2025-59058 httpsig-rs's HMAC verification is vulnerable to timing attack CVE-2024-7010 Timing Attack in mudler/localai CVE-2025-7071 Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library CVE-2026-13758 CryptX versions before 0.088_001 for Perl compare AEAD authentication tags in non-constant time in the streaming decrypt_done path