CVE-2024-37283
Elastic Agent Insertion of Sensitive Information into Log File
概要
Elastic Agent Insertion of Sensitive Information into Log File
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co