Logstash Logs Sensitive Information

2022-05-1400:58:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.1%

JSON

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

CPENameOperatorVersion
logstash-coreeq1.5.0
logstash-coreeq1.5.0.rc3.snapshot1
logstash-coreeq1.5.0.rc3.snapshot4
logstash-coreeq1.5.4.snapshot3
logstash-coreeq2.2.0
logstash-coreeq2.1.2.snapshot1
logstash-coreeq2.2.3.snapshot2
logstash-coreeq1.5.2
logstash-coreeq2.2.4
logstash-coreeq2.3.0.snapshot4

Name	Operator	Version
logstash-core	eq	1.5.0
logstash-core	eq	1.5.0.rc3.snapshot1
logstash-core	eq	1.5.0.rc3.snapshot4
logstash-core	eq	1.5.4.snapshot3
logstash-core	eq	2.2.0
logstash-core	eq	2.1.2.snapshot1
logstash-core	eq	2.2.3.snapshot2
logstash-core	eq	1.5.2
logstash-core	eq	2.2.4
logstash-core	eq	2.3.0.snapshot4