Elastic Fleet Server
Moderate fix1 remedy
cpe:2.3:a:elastic:elastic_fleet_server:*:*:*:*:*:*:*, +1 more
Moderate fix1 remedy
- >= 8.13.0, <= 8.15.0
Elastic Fleet Server Sensitive Information Exposure in Logs Vulnerability
Vulnerability
Patched
A vulnerability exists in Elastic Fleet Server versions 8.13.0 prior to 8.15.0, where Fleet policies containing sensitive information could be inadvertently logged at INFO and ERROR levels. The type of sensitive information exposed varies based on the enabled integrations.
Impact
This vulnerability could lead to unauthorized exposure of sensitive information through application logs.
Remediation
Users are advised to upgrade to Elastic Fleet Server version 8.15.0.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
5.0impact
2.5exploitability
5.2remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.