9.0
Critical
CVE-2024-52975 An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on…
Description
An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fleet Server 8.13 | 8.13.0 → < 8.15.0 | 8.15.0 |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Fleet Server
The 7 CVEs of Fleet Server →
CVE-2026-78587
Incorrect Authorization (CWE-863) in Fleet Server can lead to a denial of service of agent upload operations via…
3.1
Low
CVE-2026-72657
Authorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to information disclosure via…
6.5
Medium
CVE-2026-72676
Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of…
6.5
Medium
CVE-2026-56150
Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via…
6.5
Medium