Lucene search

K
osvGoogleOSV:GHSA-3GG4-6HQG-2VJX
HistoryMay 13, 2022 - 1:38 a.m.

Logstash Logs Sensitive Information

2022-05-1301:38:50
Google
osv.dev
1
logstash
elasticsearch
sensitive information
http
basic auth
credentials

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

26.2%

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

26.2%

Related for OSV:GHSA-3GG4-6HQG-2VJX