CVE-2024-11994

{"id": "CVE-2024-11994", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "bressers@elastic.co", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.7, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.1}]}, "published": "2025-05-01T14:15:35.093", "references": [{"url": "https://discuss.elastic.co/t/apm-server-8-16-1-security-update-esa-2024-41/377710", "source": "bressers@elastic.co"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "bressers@elastic.co", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the document, this could disclose sensitive information in APM Server error logs."}, {"lang": "es", "value": "Los registros del servidor APM podr\u00edan contener partes del cuerpo del documento de una solicitud de indexaci\u00f3n masiva parcialmente fallida. Dependiendo de la naturaleza del documento, esto podr\u00eda revelar informaci\u00f3n confidencial en los registros de errores del servidor APM."}], "lastModified": "2025-05-02T13:53:20.943", "sourceIdentifier": "bressers@elastic.co"}