4.4
Moyenne
CVE-2024-52976 Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local…
Description
Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitrary code via parameter injection. An attacker requires local access and the ability to modify osqueryd configurations.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Elastic Agent 8.0 | 8.0.0 → 8.15.3 | Pas de correctif indiqué |
| Elastic Agent 7.0 | 7.0.0 → 7.17.24 | Pas de correctif indiqué |
Références
- discuss.elastic.co discuss.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de Elastic Agent
Les 5 CVE de Elastic Agent →
CVE-2026-78604
Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege…
7.8
Élevée
CVE-2024-37283
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the…
6.5
Moyenne
CVE-2023-6687
An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR…
6.8
Moyenne
CVE-2023-31421
It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify…
5.9
Moyenne