CVE-2024-52975Fleet Server sensitive information exposure via logs

Beschreibung

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• https://discuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522