description: Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal user database.
problem types: CWE-522: Insufficiently Protected Credentials
affected:
{
product: Search Guard
vendor: floragunn
versions:
lessThan: 23.1, status: affected, version: unspecified, versionType: custom
}