CVE-2022-23716

medium

Description

A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.

References

https://www.elastic.co/community/security/

https://discuss.elastic.co/t/elastic-cloud-enterprise-3-1-1-security-update/315317

Details

Source: Mitre, NVD

Published: 2022-09-28

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N