Lucene search
+L

3 matches found

NVD
NVD
added 2023/10/26 12:15 a.m.32 views

CVE-2023-46668

If Elastic Endpoint v7.9.0 - v8.10.3 is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed in Elasticsearch in...

9.1CVSS5.8AI score0.00348EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/10/25 11:59 p.m.47 views

CVE-2023-46668 Elastic Endpoint Insertion of Sensitive Information into Log File

If Elastic Endpoint v7.9.0 - v8.10.3 is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed in Elasticsearch in...

4.6CVSS9.2AI score0.00348EPSS
SaveExploits0References2
CVE
CVE
added 2023/10/25 11:59 p.m.74 views

CVE-2023-46668

CVE-2023-46668 affects Elastic Endpoint versions 7.9.0 through 8.10.3. When Endpoint is configured with a non-default option that enables debug logging and Elastic Agent is also configured to collect and ship those logs to Elasticsearch, API keys used by Elastic Agent can be viewed in Elasticsear...

9.1CVSS5.8AI score0.00348EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder