VYPR
← All advisories
Medium severity6.8NVD Advisory· Published Dec 12, 2023· Updated Jun 17, 2026

CVE-2023-49922

CVE-2023-49922

Description

An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the event that Beats or Elastic Agent attempted to ingest, this could lead to the insertion of sensitive or private information in the Beats or Elastic Agent logs. Elastic has released 8.11.3 and 7.17.16 that prevents this issue by limiting these types of logs to DEBUG level logging, which is disabled by default.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
github.com/elastic/beats/v7Go
>= 7.0.0, < 7.17.167.17.16
github.com/elastic/beatsGo
>= 8.0.0, < 8.11.38.11.3
github.com/elastic/beatsGo
>= 7.0.0, < 7.17.167.17.16

Affected products

95

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.