CVE-2021-22143

CVSS V2 None CVSS V3 None
Description
The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application error. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM server. During an application error it is possible the headers will not be sanitized before being sent.
Overview
  • CVE ID
  • CVE-2021-22143
  • Assigner
  • elastic
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-11-22T01:21:58.888Z
  • Last Modified Date
  • 2023-11-22T01:21:58.888Z
Weakness Enumerations
CWE URL
CWE-200 http://cwe.mitre.org/data/definitions/200.html
References
Reference URL Reference Tags
https://discuss.elastic.co/t/elastic-apm-net-agent-1-10-0-security-update/274668
https://www.elastic.co/community/security
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2021-22143
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22143
History
Created Old Value New Value Data Type Notes
2024-06-24 16:28:04 Added to TrackCVE