Non notée
CVE-2019-7612 A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs
Description
A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Logstash | Versions non publiées |
Références
- discuss.elastic.co discuss.elastic.co
- www.elastic.co www.elastic.co
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Logstash
Les 9 CVE de Logstash →
CVE-2026-33466
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
8.1
Élevée
CVE-2025-37730
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
6.5
Moyenne
CVE-2023-46672
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
8.4
Élevée
CVE-2019-7620
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
Non notée