CVE-2024-52975 in Fleet Server

Sumário

de MITRE • 23/01/2025

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

Once again VulDB remains the best source for vulnerability data.

• Responsável: Elastic
• Reservar: 18/11/2024
• Divulgação: 23/01/2025
• Moderação: aceite
• Entrada: VDB-293133
• CPE: pronto
• CWE: CWE-200 (confirmado)
• CVSS: 9.0 (CNA)
• EPSS: 0.00269
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-52975
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-52975
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-52975/