VYPR
← All advisories
Moderate severityNVD Advisory· Published Dec 12, 2023· Updated Dec 2, 2024

Beats Insertion of Sensitive Information into Log File

CVE-2023-49922

Description

An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Beats or Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Beats or Elastic Agent logs. Elastic has released 8.11.3 and 7.17.16 that prevents this issue by limiting these types of logs to DEBUG level logging, which is disabled by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
github.com/elastic/beats/v7Go
>= 7.0.0, < 7.17.167.17.16
github.com/elastic/beatsGo
>= 8.0.0, < 8.11.38.11.3
github.com/elastic/beatsGo
>= 7.0.0, < 7.17.167.17.16

Affected products

52

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.