CVE Vulnerabilities

CVE-2022-23716

Insertion of Sensitive Information into Log File

Published: Sep 28, 2022 | Modified: May 21, 2025
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.

Weakness

The product writes sensitive information to a log file.

Affected Software

Name Vendor Start Version End Version
Elastic_cloud_enterprise Elastic * 3.1.1 (excluding)

Potential Mitigations

References