Lucene search
PRIOn knowledge basePRION:CVE-2022-23715HistoryAug 25, 2022 - 6:15 p.m.
Design/Logic Flaw
2022-08-2518:15:00
PRIOn knowledge base
www.prio-n.com
flaw
ece before 3.4.0
sensitive information disclosure
user passwords
elasticsearch keystore
audit log
deployment logs
logging and monitoring cluster
patch api
nvd
A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH /api/v1/user and PATCH /deployments/{deployment_id}/elasticsearch/{ref_id}/keystore
| CPE | Name | Operator | Version |
|---|---|---|---|
| elastic_cloud_enterprise | lt | 3.4.0 |
Related
cve
cve
CVE-2022-23715
2022-08-25 18:15:09
cvelist
cvelist
CVE-2022-23715
2022-08-25 17:25:42
nvd
nvd
CVE-2022-23715
2022-08-25 18:15:09