Output Plugin
1 CVEs
product
Monthly
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Elastic
Elasticsearch
Output Plugin
NVD
CVSS 3.0
6.5
EPSS
0.3%
CVE-2016-10362
Ruby
EPSS 0%
CVSS 6.5
MEDIUM
PATCH
This Month
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Elastic
Elasticsearch
+1
NVD