CVE-2023-31417

Summary

CVE-2023-31417 is a vulnerability in Elasticsearch that allows sensitive information, including passwords and tokens, to be logged in cleartext when using certain deprecated APIs. The filtering mechanism Elasticsearch uses to protect sensitive data in audit logs does not apply to these specific requests. By default, audit logging is disabled, and even when enabled, request bodies containing sensitive information are not printed to the audit log without explicit configuration. This issue poses a significant risk for organizations that rely on Elasticsearch for data management and security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.