CVE-2021-22133

The CVE-2021-22133 vulnerability affects the Elastic APM Go agent (go.elastic.co/apm) versions before 1.11.0. During a application panic, the agent may log HTTP header details without sanitizing sensitive information, potentially leaking headers and affecting confidentiality. Root cause: headers ...

CVE-2021-37941

Summary: The CVE-2021-37941 issue affects the Elastic APM Java Agent. It enables local privilege escalation by allowing a user to attach a malicious file to an application running with the agent, potentially executing commands with higher privileges. Affected software: APM Java Agent (Elastic). A...

CVE-2019-7617

Elastic APM for Python versions before 5.1.0 is affected when run as a CGI script. A variable name clash occurs if an attacker can control the proxy header, potentially redirecting collected APM data to a proxy of their choosing. Impact described is data redirection/exfiltration. Recommended reme...