by Kastro
Paper/Archive/CVE-2024-52975

CVE-2024-52975

Elastic Fleet Server — Fleet Server sensitive information exposure via logs

EPSS 0.3%CVSS 9.0
critical.is priorityof 100
31
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 19.7.197 × 203.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

Affected

ProductAffectedFixed inSource
Fleet Server8.13.0 – < 8.15.08.15.0CNA

Scores by source

elastic (CNA)9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refdiscuss.elastic.co/t/fleet-server-8-15-0-security-update-esa-2024-31/373522