CVE-2023-46671

Summary

CVE-2023-46671 is an Elastic vulnerability where sensitive information, including account credentials for the kibana_system user, API keys, and Kibana end-user credentials, may be recorded in Kibana logs during certain error conditions. This issue only arises when an error is returned from an Elasticsearch cluster during user interaction with an unhealthy cluster, such as one experiencing circuit breaker or no shard exceptions. Elastic has released Kibana 8.11.1 to address this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.