4.3
Moyenne
CVE-2026-115289 Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…
Description
Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a specially crafted agent configuration request. An authenticated APM agent could receive the central agent configuration that belongs to a different service until the cached configuration expires. A service could also run with central configuration settings, such as sampling settings, that were meant for a different service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| APM Server 9.5 | 9.5.0 → 9.5.5 | Pas de correctif indiqué |
| APM Server 9.0 | 9.0.0 → 9.4.8 | Pas de correctif indiqué |
| APM Server 8.0 | 8.0.0 → 8.19.23 | Pas de correctif indiqué |
Références
- discuss.elastic.co discuss.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de APM Server
Les 8 CVE de APM Server →
CVE-2026-115716
Allocation of Resources Without Limits or Throttling (CWE-770) in APM Server can lead to denial of service via Oversized…
6.5
Moyenne
CVE-2026-78594
Improper Handling of Highly Compressed Data (CWE-409) in APM Server can lead to a persistent denial of service via…
4.9
Moyenne
CVE-2025-0712
An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory…
7.0
Élevée
CVE-2024-11994
APM server logs could contain parts of the document body from a partially failed bulk index request
5.7
Moyenne