~ / search / GHSA-vcmm-ppqx-95ch

GHSA-vcmm-ppqx-95ch

Logstash Logs Sensitive Information

Source: GitHub Advisory Database (reviewed) High CVE-2016-1000221

Packages

EcosystemPackageAffectedFixed in
RubyGems logstash-core < 2.3.4 2.3.4

Details

As written in the advisory (Markdown source, shown as plain text).

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

References

External links from the advisory. They lead to third-party sites.