CVE-2023-46667

{"id": "CVE-2023-46667", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "bressers@elastic.co", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.8}]}, "published": "2023-10-26T01:15:07.987", "references": [{"url": "https://discuss.elastic.co/t/fleet-server-v8-10-3-security-update/344737", "tags": ["Release Notes"], "source": "bressers@elastic.co"}, {"url": "https://www.elastic.co/community/security", "tags": ["Vendor Advisory"], "source": "bressers@elastic.co"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-532"}]}, {"type": "Secondary", "source": "bressers@elastic.co", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server\u2019s log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and potentially use that to retrieve other secrets in the policy including for Elasticsearch and third-party services. Alternatively a threat actor could potentially enrol agents to the clusters and send arbitrary events to Elasticsearch."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Fleet Server en versiones &gt;= v8.10.0 y &lt; v8.10.3 donde los tokens de inscripci\u00f3n del agente se insertan en el archivo de registro del Fleet Server en texto plano. Estos tokens de inscripci\u00f3n podr\u00edan permitir que alguien inscriba a un agente en una pol\u00edtica de agente y potencialmente usarlo para recuperar otros secretos en la pol\u00edtica, incluso para Elasticsearch y servicios de terceros. Alternativamente, un actor de amenazas podr\u00eda potencialmente inscribir agentes en los cl\u00fasteres y enviar eventos arbitrarios a Elasticsearch."}], "lastModified": "2023-11-03T15:38:27.067", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:elastic:fleet_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0B81D69-3EDE-4765-8870-E1C55A13795C", "versionEndExcluding": "8.10.3", "versionStartIncluding": "8.10.0"}], "operator": "OR"}]}], "sourceIdentifier": "bressers@elastic.co"}