{"id":"CVE-2025-25013","state":"PUBLISHED","title":"Elastic Defend Insertion of Sensitive Information into Log Files","description":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.","publishedAt":"2025-04-08T22:16:00.886Z","updatedAt":"2025-04-09T19:28:32.185Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","source":"elastic"},"assigner":"elastic","products":["Elastic Elastic Defend"],"affected":[{"vendor":"Elastic","product":"Elastic Defend","defaultStatus":"unaffected","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.17.3","versionType":"semver"}],"platforms":["MacOS"]}],"references":["https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T20:08:47.682Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/25xxx/CVE-2025-25013.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-25013","state":"PUBLISHED","datePublished":"2025-04-08T22:16:00.886Z","dateUpdated":"2025-04-09T19:28:32.185Z","assignerShortName":"elastic","assignerOrgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","dateReserved":"2025-01-31T15:28:16.917Z"},"containers":{"cna":{"title":"Elastic Defend Insertion of Sensitive Information into Log Files","descriptions":[{"lang":"en","value":"Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack."}],"affected":[{"vendor":"Elastic","product":"Elastic Defend","defaultStatus":"unaffected","versions":[{"version":"8.0.0","status":"affected","lessThan":"8.17.3","versionType":"semver"}],"platforms":["MacOS"]}],"references":[{"url":"https://discuss.elastic.co/t/elastic-defend-8-17-3-security-update-esa-2025-05/376921"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","description":"CWE-532 Insertion of Sensitive Information into Log File","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"elastic","orgId":"271b6943-45a9-4f3a-ab4e-976f3fa05b5a","dateUpdated":"2025-04-08T22:16:00.886Z"},"impacts":[{"capecId":"CAPEC-117","descriptions":[{"lang":"en","value":"CAPEC-117 Interception"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-09T19:28:00.197694Z","id":"CVE-2025-25013","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-09T19:28:32.185Z"}}]}}}