CVE-2021-22143CWE-200

Elastic APM .NET Agent information disclosure

Low · published November 22, 2023

CVSS v3.1
2.1
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application error. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM server. During an application error it is possible the headers will not be sanitized before being sent.

The record
Technical detail
CVSS v3.1
2.1 · LOW
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00663 · 51.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-11-22T01:21Z
EPSS history
Timeline
  • 22 NOV 01:21Z
    Elastic APM .NET Agent information disclosure
    cvelistv5