CVE-2024-37286

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-37286
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-37286.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-37286
Aliases
Related
Published
2024-08-03T16:15:49Z
Modified
2025-02-14T11:53:23.082014Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailableshardsexception for a specific document, since the ES response line contains the document body, and that APM server logs the ES response line on error, the document is effectively logged.

References

Affected packages

Git / github.com/elastic/apm-server

Affected ranges

Type
GIT
Repo
https://github.com/elastic/apm-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed

Affected versions

v7.*

v7.0.0-alpha1
v7.0.0-alpha2

v8.*

v8.0.0-alpha1
v8.0.0-alpha2