CVE-2024-11994
APM Server Insertion of Sensitive Information into Log File
Summary
APM Server Insertion of Sensitive Information into Log File
Original description
The description as published by the source.
APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co