{"id":2560,"date":"2025-05-02T07:15:28","date_gmt":"2025-05-02T07:15:28","guid":{"rendered":"http:\/\/localhost\/?p=2560"},"modified":"2025-05-02T07:15:28","modified_gmt":"2025-05-02T07:15:28","slug":"cve-2023-46669-elastic-agent-elastic-endpoint-security-local-api-key-disclosure","status":"publish","type":"post","link":"https:\/\/zero.redgem.net\/?p=2560","title":{"rendered":"CVE-2023-46669 Elastic Agent \/ Elastic Endpoint Security local API key disclosure"},"content":{"rendered":"
\n

Vulnerability Details<\/h2>\n
\n

Basic Information<\/h3>\n\n\n\n\n\n\n
Title<\/th>\nCVE-2023-46669 Elastic Agent \/ Elastic Endpoint Security local API key disclosure<\/td>\n<\/tr>\n
Type<\/th>\nvulnrichment<\/td>\n<\/tr>\n
Published<\/th>\n2025-05-01T12:59:49<\/td>\n<\/tr>\n
Last Seen<\/th>\n2025-05-01T16:24:08<\/td>\n<\/tr>\n
CVSS Score<\/th>\n6.2 (MEDIUM)<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVSS v3 Details<\/h3>\n\n\n\n\n\n\n\n\n\n
Attack Vector<\/th>\nLOCAL<\/td>\n<\/tr>\n
Attack Complexity<\/th>\nLOW<\/td>\n<\/tr>\n
Privileges Required<\/th>\nNONE<\/td>\n<\/tr>\n
User Interaction<\/th>\nNONE<\/td>\n<\/tr>\n
Scope<\/th>\nUNCHANGED<\/td>\n<\/tr>\n
Confidentiality Impact<\/th>\nHIGH<\/td>\n<\/tr>\n
Integrity Impact<\/th>\nNONE<\/td>\n<\/tr>\n
Availability Impact<\/th>\nNONE<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

CVE Information<\/h3>\n\n\n\n\n
CVE IDs<\/th>\nCVE-2023-46669<\/td>\n<\/tr>\n
CWE<\/th>\nCWE-200<\/td>\n<\/tr>\n
Bulletin Family<\/th>\ncve<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

Description<\/h3>\n
\n Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or has been exploited by malicious actors.\n <\/div>\n<\/p><\/div>\n
\n

Impact Assessment<\/h3>\n\n\n\n
Base Score<\/th>\n6.2<\/td>\n<\/tr>\n
Severity<\/th>\nMEDIUM<\/td>\n<\/tr>\n<\/table><\/div>\n
\n

View full CVE details<\/a><\/p>\n<\/p><\/div>\n<\/div>\n