Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2023-46669
Analyzed
More InfoOfficial Page
Source-bressers@elastic.co
View Known Exploited Vulnerability (KEV) details
Published At-01 May, 2025 | 13:15
Updated At-01 Oct, 2025 | 19:31

Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or has been exploited by malicious actors.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.16.2MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary3.17.1HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Type: Secondary
Version: 3.1
Base score: 6.2
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Type: Primary
Version: 3.1
Base score: 7.1
Base severity: HIGH
Vector:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CPE Matches

Elasticsearch BV
elastic
>>elastic_agent>>Versions before 8.15.0(exclusive)
cpe:2.3:a:elastic:elastic_agent:*:*:*:*:*:*:*:*
Elasticsearch BV
elastic
>>endpoint_security>>Versions before 8.15.0(exclusive)
cpe:2.3:a:elastic:endpoint_security:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-200Secondarybressers@elastic.co
NVD-CWE-noinfoPrimarynvd@nist.gov
CWE ID: CWE-200
Type: Secondary
Source: bressers@elastic.co
CWE ID: NVD-CWE-noinfo
Type: Primary
Source: nvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://discuss.elastic.co/t/elastic-agent-elastic-endpoint-security-security-update-esa-2025-03/377706bressers@elastic.co
Patch
Vendor Advisory
Hyperlink: https://discuss.elastic.co/t/elastic-agent-elastic-endpoint-security-security-update-esa-2025-03/377706
Source: bressers@elastic.co
Resource:
Patch
Vendor Advisory
Change History
0Changes found

Details not found