CVE-2023-46668
Assigner: elastic
Published: 2023-10-25T23:59:13.485Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Endpoint
vendor: Elastic
versions: status: affected
version: 7.9.0, 8.10.3
datePublic: 2023-10-17T12:07:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed in Elasticsearch in plaintext. These API keys could be used to write arbitrary data and read Elastic Endpoint user artifacts.
value: If Elastic Endpoint (v7.9.0 - v8.10.3) is configured to use a non-default option in which the logging level is explicitly set to debug, and when Elastic Agent is simultaneously configured to collect and send those logs to Elasticsearch, then Elastic Agent API keys can be viewed in Elasticsearch in plaintext. These API keys could be used to write arbitrary data and read Elastic Endpoint user artifacts.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-532
description: CWE-532: Insertion of Sensitive Information into Log File
type: CWE
source: discovery: UNKNOWN
title: Elastic Endpoint Insertion of Sensitive Information into Log File
x_generator: engine: Vulnogram 0.1.0-dev