CVE-2022-23716

CVE-2022-23716

Vendor Elastic
Product Elastic Cloud Enterprise
Weakness CWE-532 · Sensitive info in logs
Published September 28, 2022
Last update May 21, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.

Key dates

02Disclosure timeline

September 28, 2022 CVE published
May 21, 2025 Record updated