Medium severity · published Sep 28, 2022
CVE-2022-23716
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and…
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
A flaw was discovered in ECE before 3.1.1 that could lead to the disclosure of the SAML signing private key used for the RBAC features, in deployment logs in the Logging and Monitoring cluster.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 51% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EC
Elastic Cloud Enterprise · Elastic
before 3.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-23716
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-23716
Release Notes
https://discuss.elastic.co/t/elastic-cloud-enterprise-3-1-1-security-update/315317
Product
https://www.elastic.co/community/security/
More from Elastic Cloud Enterprise
9.8
CVE-2024-37282
It was identified that under certain specific preconditions, an API key that was originally created with a specific privileges could be subsequently used to create new API keys…
8.8
CVE-2025-37736
Elastic Cloud Enterprise Improper Authorization
8.2
CVE-2026-115709
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss
7.5
CVE-2026-115713
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification
7.5
CVE-2023-31418
An issue has been identified with how Elasticsearch handled incoming requests on the HTTP layer