Elastic

Fleet Server

3 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-56150

  • EPSS 0.31%
  • Veröffentlicht 01.07.2026 16:26:31
  • Zuletzt bearbeitet 06.07.2026 18:51:50

Allocation of Resources Without Limits or Throttling (CWE-770) in Fleet Server can lead to a denial of service via Excessive Allocation (CAPEC-130). An attacker can submit a specially crafted request to an upload endpoint that causes excessive memory...

9

CVE-2024-52975

  • EPSS 0.27%
  • Veröffentlicht 23.01.2025 08:15:16
  • Zuletzt bearbeitet 15.04.2026 00:35:42

An issue was identified in Fleet Server where Fleet policies that could contain sensitive information were logged on INFO and ERROR log levels. The nature of the sensitive information largely depends on the integrations enabled.

8.1

CVE-2023-46667

  • EPSS 0.47%
  • Veröffentlicht 26.10.2023 01:15:07
  • Zuletzt bearbeitet 21.11.2024 08:29:01

An issue was discovered in Fleet Server >= v8.10.0 and < v8.10.3 where Agent enrolment tokens are being inserted into the Fleet Server’s log file in plain text. These enrolment tokens could allow someone to enrol an agent into an agent policy, and po...