CVE-2022-23715CWE-532

A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings…

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or deployment logs in the Logging and Monitoring cluster. The affected APIs are PATCH /api/v1/user and PATCH /deployments/{deployment_id}/elasticsearch/{ref_id}/keystore

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2022-08-25T17:25Z
EPSS history
Timeline
  • 25 AUG 17:25Z
    A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings…
    cvelistv5