CVE-2024-37286

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-37286
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-37286.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-37286
Aliases
Related
Published
2024-08-03T16:15:49.060Z
Modified
2026-03-12T05:03:54.984237Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

APM server logs contain document body from a partially failed bulk index request. For example, in case of unavailableshardsexception for a specific document, since the ES response line contains the document body, and that APM server logs the ES response line on error, the document is effectively logged.

References

Affected packages

Git / github.com/elastic/apm-server

Affected ranges

Type
GIT
Repo
https://github.com/elastic/apm-server
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
a440663cd3f924b3de4453a4c9737a9c72157ee3
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "8.14.0"
        }
    ]
}

Affected versions

v7.*
v7.0.0-alpha1
v7.0.0-alpha2
v8.*
v8.0.0-alpha1
v8.0.0-alpha2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-37286.json"