NetSight
medium6.5

CVE-2024-37283

An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug.

Impact

An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configured to debug. By default the log level is set to info, where no leak occurs.

Affected products

VendorProductAffected versions
ElasticElastic Agent
from 8.6.0 before 8.15.0

Weakness classification

References