VYPR
← All advisories
High severity8.1NVD Advisory· Published Sep 19, 2018· Updated Jun 17, 2026

CVE-2018-3827

CVE-2018-3827

Description

A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) plugin. When the repository-azure plugin is set to log at TRACE level Azure credentials can be inadvertently logged.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Elastic/Azure Repository3 versions
    cpe:2.3:a:elastic:azure_repository:*:*:*:*:*:azure:*:*+ 2 more
    • cpe:2.3:a:elastic:azure_repository:*:*:*:*:*:azure:*:*range: >=6.0.1,<=6.2.4
    • cpe:2.3:a:elastic:azure_repository:6.0.0:beta1:*:*:*:azure:*:*
    • cpe:2.3:a:elastic:azure_repository:6.0.0:beta2:*:*:*:azure:*:*
  • Elastic/repository-azurellm-fuzzy
    Range: <6.3.0
  • Elastic/Elasticsearchv5
    Range: before 6.3.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.