CVE-2023-46672highCWE-532

CVE-2023-46672: fallo de gravedad alta en Elastic Logstash

Logstash Insertion of Sensitive Information into Log File

Publicada el 15 nov 2023 · Actualizada el 13 feb 2025

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.4epss 0.3%

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: * Logstash is configured to log in JSON format https://www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html , which is not the default logging format. * Sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Productos afectados

Elastic · Logstash

CVEs relacionadas — Elastic Logstash

En el mismo producto, de las más peligrosas a las menos.

CVE-2019-7612—CVE-2019-7612EPSS 2.4%CVE-2019-7620—CVE-2019-7620EPSS 2.1%CVE-2016-10363—CVE-2016-10363EPSS 1.5%CVE-2019-7613—CVE-2019-7613EPSS 1.3%CVE-2016-10362—CVE-2016-10362EPSS 1.1%CVE-2018-3817—CVE-2018-3817EPSS 1.0%

Referencias

https://discuss.elastic.co/t/logstash-8-11-1-security-update-esa-2023-26/347191 https://security.netapp.com/advisory/ntap-20240125-0002/https://security.netapp.com/advisory/ntap-20240229-0001/https://www.elastic.co/community/security