Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Fleet Server sensitive information exposure via logs
Vulnerability Description
An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
信息暴露
Vulnerability Title
Elastic Fleet Server 信息泄露漏洞
Vulnerability Description
Elastic Fleet Server是荷兰Elastic公司的一个将 Elastic Agent 连接到 Fleet 的组件。 Elastic Fleet Server存在安全漏洞，该漏洞源于队列策略在INFO和ERROR日志级别被记录，导致可能包含敏感信息的日志被暴露。
CVSS Information
N/A
Vulnerability Type
N/A