CVE-2024-52975 — Fleet Server sensitive information exposure via logs

CVE-2024-52975

Fleet Server sensitive information exposure via logs PUBLISHED

Description (CNA)

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

Affected (CNA)

Vendor / product	Versions
Elastic / Fleet Server	affected 8.13.0 before 8.15.0

CWE

CWE-200

References

https://discuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.