Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.
CPE | Name | Operator | Version |
---|---|---|---|
logstash | eq | 1.1.0beta9 | |
logstash | eq | 1.1.1-rc1 | |
logstash | eq | 2.3.0.snapshot3 | |
logstash | eq | 2.3.3 | |
logstash | eq | 2.3.1.snapshot1 | |
logstash | eq | 1.1.3 | |
logstash | eq | 1.0.4 | |
logstash | eq | 1.2.0.beta2 | |
logstash | eq | 1.0.9 | |
logstash | eq | 1.1.12 |