CVE-2016-1000221

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-06-16

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Logstash (Elastic)

References

• http://www.securityfocus.com/bid/99126
• https://www.elastic.co/community/security