Skip to content
fr Sign in
6.5 Medium

CVE-2025-25013 Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as…

Description

Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.

Affected products and versions

Product Affected versions Fixed in
Elastic Defend 8.0 8.0.0 → < 8.17.3 8.17.3

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Elastic Defend

The 3 CVEs of Elastic Defend →
CVE-2026-56152 Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized information disclosure via Accessing… 5.3 Medium CVE-2024-37284 Improper handling of alternate encoding occurs when Elastic Defend on Windows systems attempts to scan a file or process… 5.5 Medium
Track this CVE