CVE-2024-52976

概要

参考情報

• discuss.elastic.co/t/elastic-agent-7-17-25-and-8-15-4-security-update-esa-2024-39/377708 · Patch

elastic agent のその他の脆弱性

• CVE-2026-78604高 7.8Incorrect Permission Assignment for Critical Resource (CWE-732) in Elastic Agent can lead to local privilege escalation via Replace Binaries…
• CVE-2023-46669高 7.1Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidenti…
• CVE-2024-37283中 6.5An issue was discovered whereby Elastic Agent will leak secrets from the agent policy elastic-agent.yml only when the log level is configure…
• CVE-2023-6687中 6.5An issue was discovered by Elastic whereby Elastic Agent would log a raw event in its own logs at the WARN or ERROR level if ingesting that …
• CVE-2023-31421高 7.5It was discovered that when acting as TLS clients, Beats, Elastic Agent, APM Server, and Fleet Server did not verify whether the server cert…