← Back

CVE-2022-23716

nvd nist
Published: Sep 28, 2022Modified: May 21, 2025

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.

Affected (1)

Elastic
1 product
Elastic Cloud Enterprise
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Elastic Cloud Enterprise
Before 3.1.1

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (4)

Source: security@elastic.co
Release NotesVendor Advisory
Source: security@elastic.co
Product
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Product

Timeline

No history available yet.