Latest elastic elastic cloud enterprise Vulnerabilities

● CVE-2023-31418

Elasticsearch uncontrolled resource consumption

Elastic Elasticsearch<=7.17.12

Elastic Elasticsearch>=8.0.0<=8.8.2

Elastic Elastic Cloud Enterprise<=2.13.3

Elastic Elastic Cloud Enterprise=3.6.0

maven/org.elasticsearch:elasticsearch>=8.0.0<8.9.0

maven/org.elasticsearch:elasticsearch<7.17.13

● CVE-2022-23716

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.

Elastic Elastic Cloud Enterprise<3.1.1

● CVE-2022-23715

A flaw was discovered in ECE before 3.4.0 that might lead to the disclosure of sensitive information such as user passwords and Elasticsearch keystore settings values in logs such as the audit log or ...

Elastic Elastic Cloud Enterprise<3.4.0

● CVE-2018-3825

In Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 a default master encryption key is used in the process of granting ZooKeeper access to Elasticsearch clusters. Unless explicitly overwritten, ...

Elastic Elastic Cloud Enterprise<1.1.4

● CVE-2018-3828

Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability. It was discovered that certain exception conditions would result in encryption keys, passwords, an...

Elastic Elastic Cloud Enterprise<1.1.4

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.