6.8
Medium
CVE-2023-6687 An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR…
Description
An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Elastic Agent logs. Elastic has released 8.11.3 and 7.17.16 that prevents this issue by limiting these types of logs to DEBUG level logging, which is disabled by default.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic Agent | Versions not published |
Other CVEs of Elastic Agent
The 5 CVEs of Elastic Agent →
CVE-2026-78604
Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege…
7.8
High
CVE-2024-52976
Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local…
4.4
Medium
CVE-2024-37283
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the…
6.5
Medium
CVE-2023-31421
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
5.9
Medium