Skip to content
OpenAdvisories

Product · Elastic

Beats

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2023-49922

    Beats Insertion of Sensitive Information into Log File

    An issue was discovered by Elastic whereby Beats and Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that event to Elasticsearch failed with any 4xx HTTP status code except 409 or 429. Depending on the nature of the…

    Elastic Beats github.com/elastic/beats github.com/elastic/beats/v7 Go
  • Medium 5.9
    CVE-2023-31421

    Beats, Elastic Agent, APM Server, and Fleet Server Improper Certificate Validation issue

    It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server certificate is valid for the target IP address; however, certificate signature validation is still performed. More specific…

    Elastic Apm Server Fleet Server Elastic Agent