Elastic Winlogbeat vulnerabilities
2 vulnerabilities
Known vulnerabilities in Elastic Winlogbeat, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-14047elasticelastic security+1
EPSS score0.11%
A local vulnerability in the Winlogbeat Windows installer caused runtime files to be placed in a directory writable by unprivileged users. A low-privileged attacker with existing access to the system could pre-position malicious filesystem links, causing a subsequent elevated Winlogbeat operation to write to or delete arbitrary files. Successful exploitation could result in a denial of service.CVE-2019-7613elasticlogstash+1EPSS score1.32%
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.