Aller au contenu
en Se connecter
6.8 Moyenne

CVE-2023-6687 An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR…

Description

An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Elastic Agent logs. Elastic has released 8.11.3 and 7.17.16 that prevents this issue by limiting these types of logs to DEBUG level logging, which is disabled by default.

Produits et versions touchés

Produit Versions touchées Corrigé en
Elastic Agent Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Elastic Agent

Les 5 CVE de Elastic Agent →
CVE-2026-78604 Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege… 7.8 Élevée CVE-2024-52976 Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local… 4.4 Moyenne CVE-2024-37283 An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the… 6.5 Moyenne CVE-2023-31421 It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify… 5.9 Moyenne
Suivre cette CVE