Skip to content
fr Sign in
6.2 Medium

CVE-2023-46669 Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead…

Description

Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or has been exploited by malicious actors.

Affected products and versions

Product Affected versions Fixed in
Elastic Agent and Elastic Defend 8.0 8.0.0 → < 8.15.0 8.15.0

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Elastic Agent and Elastic Defend

The 2 CVEs of Elastic Agent and Elastic Defend →
CVE-2026-102413 Uncaught Exception (CWE-248) in Elastic Endpoint can lead to denial of service via a specially crafted file name 6.2 Medium
Track this CVE