CVE-2023-49921
Description
An issue was discovered by Elastic whereby Watcher search input logged the search query results on DEBUG log level. This could lead to raw contents of documents stored in Elasticsearch to be printed in logs. Elastic has released 8.11.2 and 7.17.16 that resolves this issue by removing this excessive logging. This issue only affects users that use Watcher and have a Watch defined that uses the search input and additionally have set the search input’s logger to DEBUG or finer, for example using: org.elasticsearch.xpack.watcher.input.search, org.elasticsearch.xpack.watcher.input, org.elasticsearch.xpack.watcher, or wider, since the loggers are hierarchical.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.elasticsearch:elasticsearchMaven | < 7.17.16 | 7.17.16 |
org.elasticsearch:elasticsearchMaven | >= 8.0.0, < 8.11.2 | 8.11.2 |
Affected products
4cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*range: >=7.0.0,<7.17.16
- (no CPE)range: 7.0.0
- osv-coords2 versions
>= 7.0.0, < 7.17.16+ 1 more
- (no CPE)range: >= 7.0.0, < 7.17.16
- (no CPE)range: < 7.17.16
Patches
Vulnerability mechanics
References
3- discuss.elastic.co/t/elasticsearch-8-11-2-7-17-16-security-update-esa-2023-29/349179nvdVendor AdvisoryWEB
- github.com/advisories/GHSA-2hjr-vmf3-xwvpghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-49921ghsaADVISORY
News mentions
0No linked articles in our index yet.