CVE-2023-6687

🗓️ 12 Dec 2023 18:28:06Reported by elasticType

An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Elastic Agent logs

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2023-6687	4 Jan 202408:11	–	circl
CNNVD	Elastic Security Breach	12 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-6687 Elastic Agent Insertion of Sensitive Information into Log File	12 Dec 202318:28	–	cvelist
Elastic	Beats and Elastic Agent 8.11.3 / 7.17.16 Security Update (ESA-2023-30)	12 Dec 202317:00	–	elastic
EUVD	EUVD-2023-58908	3 Oct 202520:07	–	euvd
NVD	CVE-2023-6687	12 Dec 202319:15	–	nvd
Prion	Default credentials	12 Dec 202319:15	–	prion

NVD

Node

elastic elastic_agentRange7.0.0–7.17.16

elastic elastic_agentRange8.0.0–8.11.3

[
  {
    "defaultStatus": "unaffected",
    "product": "Elastic Agent",
    "vendor": "Elastic",
    "versions": [
      {
        "lessThan": "7.17.16, 8.11.3",
        "status": "affected",
        "version": "7.0.0, 8.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
discuss	www.discuss.elastic.co/t/beats-and-elastic-agent-8-11-3-7-17-16-security-update-esa-2023-30/349180

21 Nov 2024 08:44Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5 - 6.8

EPSS0.00401

CWE-532