CVE-2024-37286
03.08.2024, 16:15
APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailable_shards_exception for a specific document, since the ES response line contains the document body, and that APM server logs the ES response line on error, the document is effectively logged.Enginsight
Vendor | Product | Version |
---|---|---|
elastic | apm_server | 𝑥 < 8.14.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration