CVE-2018-3827

CVE-2018-3827 is an information disclosure flaw in the Elasticsearch repository-azure plugin (formerly elasticsearch-cloud-azure). When the repository-azure plugin runs with logging set to TRACE, Azure credentials can be written to logs, exposing sensitive data. Several connected sources confirm ...