CVE-2024-11994APM Server Insertion of Sensitive Information into Log File

Beschreibung

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710