Not rated
CVE-2018-3817 When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently…
Description
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Logstash | Versions not published |
References
- discuss.elastic.co discuss.elastic.co
Timeline
- Published
- Last modified
Other CVEs of Logstash
The 9 CVEs of Logstash →
CVE-2026-33466
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
8.1
High
CVE-2025-37730
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
6.5
Medium
CVE-2023-46672
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
8.4
High
CVE-2019-7620
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
Not rated