Vulnerability · Published Aug 25, 2022 · Assigned by elastic
CVE-2022-23715
Medium 6.5
In plain English
A medium-severity sensitive data in logs in Elastic Cloud Enterprise from Elastic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS NVD)6.5Medium
Exploit odds (30 days)0.8%top 42.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH /api/v1/user and PATCH /deployments/{deployment_id}/elasticsearch/{ref_id}/keystore
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elastic | Elastic Cloud Enterprise | Versions through 3.4.0 |
Weakness: CWE-532
References
- https://www.elastic.co/community/security x_refsource_MISC
- https://discuss.elastic.co/t/elastic-cloud-enterprise-3-4-0-security-update/312825 x_refsource_MISC