Skip to content
OpenAdvisories
Medium · 5.7 CVE-2024-11994 EUVD-2025-13048GHSA-p93v-94fp-qv28

APM Server Insertion of Sensitive Information into Log File

Published May 1, 2025 · Updated May 1, 2025 · Assigned by elastic

Description

APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs.

Affected products

VendorProductAffectedFixed
Elastic APM Server 8.0.0 – < 8.16.1 8.16.1

References