PT-2021-14861
CVE-2021-22133
·
تاريخ النشر
2021-02-10
·
تاريخ التحديث
2021-05-18
الوصف من
CVSS 2.0
2.7
منخفضةالمقاييسAV:A/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Elastic APM agent for Go versions prior to 1.11.0
Description
The issue arises when the application panics, potentially leading to the leakage of sensitive HTTP header information. Normally, the APM agent sanitizes sensitive HTTP header details before sending them to the APM server. However, during an application panic, it is possible that these headers will not be sanitized before being sent.
Recommendations
For Elastic APM agent for Go versions prior to 1.11.0, update to version 1.11.0 or later to resolve the issue.
As a temporary workaround, consider implementing additional logging sanitization measures to minimize the risk of sensitive HTTP header information leakage during application panics.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾