Lucene search
HistorySep 28, 2022 - 8:15 p.m.
CVE-2022-23716
ece
saml
signing key
disclosure
rbac
logging and monitoring
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
33.5%
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.
Affected configurations
Node
elasticelastic_cloud_enterpriseRange<3.1.1
Related
cve
cve
CVE-2022-23716
2022-09-28 20:15:11
prion
prion
Design/Logic Flaw
2022-09-28 20:15:00
cvelist
cvelist
CVE-2022-23716
2022-09-28 19:34:00
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
33.5%
Related for NVD:CVE-2022-23716