CVE-2018-3827 - AskarLabs CVE Database

CVE-2018-3827

Vendor Elastic

Product Elasticsearch

Weakness CWE-532 · Sensitive info in logs

Published September 19, 2018

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A sensitive data disclosure flaw was found in the Elasticsearch repository-azure (formerly elasticsearch-cloud-azure) plugin. When the repository-azure plugin is set to log at TRACE level Azure credentials can be inadvertently logged.

Key dates

02Disclosure timeline

September 19, 2018 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-3827 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2023-46668 Elastic Endpoint Insertion of Sensitive Information into Log File CVE-2026-8200 Schema validation log messages may not redact user data CVE-2021-23046 CVE-2023-39348 Improper log output when using GitHub Status Notifications in spinnaker CVE-2025-9985 Featured Image from URL (FIFU) <= 5.2.7 - Unauthenticated Information Exposure via Log File