CVE-2024-37283

概要

参考情報

• discuss.elastic.co/t/elastic-agent-8-15-0-security-update-esa-2024-23/364635 · Issue Tracking

elastic agent のその他の脆弱性

• CVE-2026-78604高 7.8Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries…
• CVE-2024-52976高 7.8Inclusion of functionality from an untrusted control sphere in Elastic Agent subprocess, osqueryd, allows local attackers to execute arbitra…
• CVE-2023-46669高 7.1Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidenti…
• CVE-2023-6687中 6.5An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that …
• CVE-2023-31421高 7.5It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server cert…