CVE-2024-11994 — APM Server Insertion of Sensitive Information into Log File

CVE-2024-11994

APM Server Insertion of Sensitive Information into Log File PUBLISHED

Description (CNA)

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.

Affected (CNA)

Vendor / product	Versions
Elastic / APM Server	affected 8.0.0 before 8.16.1

CWE

CWE-200

References

https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.