Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-23448
HistoryFeb 07, 2024 - 10:15 p.m.

Design/Logic Flaw

2024-02-0722:15:00
PRIOn knowledge base
www.prio-n.com
5
apm server
design flaw
logic flaw
sensitive data exposure
server logs

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.4%

An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this could lead to the insertion of sensitive or private information in the APM Server logs.

CPENameOperatorVersion
apm_serverlt8.12.1

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.4%

Related for PRION:CVE-2024-23448