CVE-2024-37283
Elastic Agent Insertion of Sensitive Information into Log File
Résumé
Elastic Agent Insertion of Sensitive Information into Log File
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co