Vulnerability · Published Feb 7, 2024 · Assigned by elastic
CVE-2024-23448APM Server Insertion of Sensitive Information into Log File
Medium 5.7
In plain English
A medium-severity sensitive data in logs in APM Server from Elastic. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this could lead to the insertion of sensitive or private information in the APM Server logs.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/elastic/apm-server | 8.12.1 | GHSA-8r33-q5j5-rh7g |
| Go | github.com/elastic/apm-server | no fix listed | GO-2024-2556 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elastic | APM Server | 8.12 – before 8.12.1 |
Weakness: CWE-532 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N