VULNERABILITY INTELLIGENCE
CVE-2024-52975
CVSS score9 CRITICAL
EPSS probability0.27%
CISA KEVNot currently listed
Published2025-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description
An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.
Weakness classification
- security@elastic.co: CWE-200