CVE-2024-37283
Elastic Agent Insertion of Sensitive Information into Log File
Summary
Elastic Agent Insertion of Sensitive Information into Log File
Original description
The description as published by the source.
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co