Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-37283

Elastic Agent Insertion of Sensitive Information into Log File

Description

An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Elastic Agent

Default version status: unaffected

  • 8.6.0 to < 8.15.0affected

References