CVE-2018-3827

State: PUBLISHED · Published: 2018-09-19 · Updated: 2024-08-05 · Assigner: elastic

Description

A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) plugin. When the repository-azure plugin is set to log at TRACE level Azure credentials can be inadvertently logged.

CWE

CWE-532 — CWE-532: Information Exposure Through Log Files

Affected

Elastic / Elasticsearch — v=before 6.3.0 [affected]

CVSS

(none)

References

https://www.elastic.co/community/security x_refsource_CONFIRM
https://discuss.elastic.co/t/elastic-stack-6-3-0-and-5-6-10-security-update/135777 x_refsource_CONFIRM

Source

cvelistV5-main/cves/2018/3xxx/CVE-2018-3827.json