CVE-2025-37727
Elasticsearch Insertion of sensitive information in log file
Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Elastic · ElasticsearchQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →