EUVD-2022-2178

Malicious code in bioql PyPI...

EUVD-2022-5343

Malicious code in bioql PyPI...

Information Exposure

Overview logstash-core is a scalable log and event management tool. Affected versions of this package are vulnerable to Information Exposure. Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information. Remediation Upgrade logstash-core to...

SUSE CVE-2016-10362

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials...

GHSA-VCMM-PPQX-95CH Logstash Logs Sensitive Information

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...

CVE-2016-1000221

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...

CVE-2016-1000221

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...

CVE-2016-10362

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials...

PT-2017-7672

Name of the Vulnerable Software and Affected Versions Logstash versions prior to 2.3.4 Description The issue concerns the logging of HTTP authorization headers by the Elasticsearch Output plugin, which could potentially contain sensitive information. Recommendations For versions prior to 2.3.4,...

PT-2017-7878

Name of the Vulnerable Software and Affected Versions Logstash versions prior to 5.0.1 Description The issue concerns the Elasticsearch Output plugin in Logstash. When updating connections after sniffing, the plugin would log HTTP basic auth credentials to a file. Recommendations For versions pri...

CVE-2016-10362: Insertion of Sensitive Information into Log File

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials...

CVE-2016-1000221: Exposure of Sensitive Information to an Unauthorized Actor

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...

Logstash 5.0.1 released with a security patch

Hi all, we would like to announce that Logstash 5.0.1 has been released with an important security patch. Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials. We advise our users using Logstash and...

Logstash 2.3.3 Elasticsearch Output Vulnerability

Hi all, we would like to announce a security vulnerability we discovered in our testing. Logstash 2.3.4 has been released with a patch to fix this. Issue Prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...