CVE-2023-31417

Elasticsearch generally filters out sensitive information and credentials before logging to the audit log. It was found that this filtering was not applied when requests to Elasticsearch use certain deprecated URIs for APIs. The impact of this flaw is that sensitive information such as passwords and tokens might be printed in cleartext in Elasticsearch audit logs. Note that audit logging is disabled by default and needs to be explicitly enabled and even when audit logging is enabled, request bodies that could contain sensitive information are not printed to the audit log unless explicitly configured.

• CWE-532
• CWE-532

• https://discuss.elastic.co/t/elasticsearch-8-9-2-and-7-17-13-security-update/342479Vendor Advisory
• https://security.netapp.com/advisory/ntap-20231130-0006/Third Party Advisory
• https://www.elastic.co/community/securityVendor Advisory
• https://discuss.elastic.co/t/elasticsearch-8-9-2-and-7-17-13-security-update/342479Vendor Advisory
• https://security.netapp.com/advisory/ntap-20231130-0006/Third Party Advisory
• https://www.elastic.co/community/securityVendor Advisory

Published

Oct 26, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31411A remote unprivileged attacker can modify and access configu…9.8
• CVE-2023-31412The LMS5xx uses weak hash generation methods, resulting in t…7.5
• CVE-2023-31413Filebeat versions through 7.17.9 and 8.6.2 have a flaw in ht…3.3
• CVE-2023-31414Kibana versions 8.0.0 through 8.7.0 contain an arbitrary cod…8.8
• CVE-2023-31415Kibana version 8.7.0 contains an arbitrary code execution fl…8.8
• CVE-2023-31416Secret token configuration is never applied when using ECK <…5.3
• CVE-2023-31418An issue has been identified with how Elasticsearch handled …7.5
• CVE-2023-31419A flaw was discovered in Elasticsearch, affecting the _searc…7.5
• CVE-2023-3142Cross-site Scripting (XSS) - Stored in GitHub repository mic…5.4
• CVE-2023-31421It was discovered that when acting as TLS clients, Beats, El…7.5
• CVE-2023-31422An issue was discovered by Elastic whereby sensitive informa…7.5
• CVE-2023-31423Possible information exposure through log file vulnerabilit…5.5