CVE-2018-3828
CVE-2018-3828
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
19 set 2018Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Elastic Cloud Enterprise (ECE) versions prior to 1.1.4 contain an information exposure vulnerability. It was discovered that certain exception conditions would result in encryption keys, passwords, and other security sensitive headers being leaked to the allocator logs. An attacker with access to the logging cluster may obtain leaked credentials and perform authenticated actions using these credentials.
Produtos afetados
Elastic · Elastic Cloud EnterpriseQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →