Medium severity5.3NVD Advisory· Published Oct 30, 2019· Updated Jun 17, 2026
CVE-2019-7619
CVE-2019-7619
Description
Elasticsearch versions 7.0.0-7.3.2 and 6.7.0-6.8.3 contain a username disclosure flaw was found in the API Key service. An unauthenticated attacker could send a specially crafted request and determine if a username exists in the Elasticsearch native realm.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.elasticsearch:elasticsearchMaven | >= 6.7.0, < 6.8.4 | 6.8.4 |
org.elasticsearch:elasticsearchMaven | >= 7.0.0, < 7.4.0 | 7.4.0 |
Affected products
3cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*range: >=6.7.0,<=6.8.3
- (no CPE)range: 7.0.0, 7.0.1, 7.1.0, 7.1.1, 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.3.2, 6.7.0, 6.7.1, 6.7.2, 6.8.0, 6.8.1, 6.8.2, 6.8.3
Patches
Vulnerability mechanics
References
5- discuss.elastic.co/t/elastic-stack-6-8-4-security-update/204908nvdVendor AdvisoryWEB
- discuss.elastic.co/t/elastic-stack-7-4-0-security-update/201831nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-hxp8-r9g3-grfrghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2019-7619ghsaADVISORY
- www.elastic.co/community/securitynvdVendor AdvisoryWEB
News mentions
0No linked articles in our index yet.