CVE-2025-25013
Elastic Defend Insertion of Sensitive Information into Log Files
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Elastic Defend Insertion of Sensitive Information into Log Files
Improper restriction of environment variables in Elastic Defend can lead to exposure of sensitive information such as API keys and tokens via automatic transmission of unfiltered environment variables to the stack.
Reserved 2025-01-31 | Published 2025-04-08 | Updated 2025-04-09 | Assigner elasticCWE-532 Insertion of Sensitive Information into Log File
discuss.elastic.co/...7-3-security-update-esa-2025-05/376921
Support options
