Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2024-52975

Fleet Server sensitive information exposure via logs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
elastic

Description

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Elastic Fleet Server

Default version status: unaffected

  • 8.13.0 to < 8.15.0affected

References