NetSight
high7.5

CVE-2016-1000221

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

Impact

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

Affected products

VendorProductAffected versions
ElasticLogstash
through 2.3.3

Weakness classification

References