Non notée
CVE-2016-10362 Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file…
Description
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Logstash | Versions non publiées |
Références
- www.elastic.co www.elastic.co
- 99154 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Logstash
Les 9 CVE de Logstash →
CVE-2026-33466
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
8.1
Élevée
CVE-2025-37730
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
6.5
Moyenne
CVE-2023-46672
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
8.4
Élevée
CVE-2019-7620
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
Non notée