medium6.5
CVE-2016-10362
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
Impact
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elasticsearch | Output Plugin | through 5.0.0 |