PT-2018-16222 · Elastic · Cloud Enterprise

Published 2018-09-19 · Updated 2019-10-09 · CVE-2018-3828

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Elastic Cloud Enterprise (ECE) versions prior to 1.1.4

Description The issue allows certain exception conditions to result in encryption keys, passwords, and other security-sensitive headers being leaked to the allocator logs. An attacker with access to the logging cluster may obtain leaked credentials and perform authenticated actions using these credentials.

Recommendations For versions prior to 1.1.4, update to version 1.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the logging cluster to minimize the risk of exploitation.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2018-3828

Affected Products

Cloud Enterprise

References · 4

• https://osv.dev/vulnerability/CVE-2018-3828 · Vendor Advisory
• https://elastic.co/community/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-3828 · Security Note
• https://discuss.elastic.co/t/elastic-cloud-enterprise-1-1-4-security-update/135778 · Vendor Advisory