The vulnerability of the Elastick Stack Filebeat software, which logs log messages, is related to errors in input data in the httpjson format. As a result, the content of the http-request headers for Authorization or Proxy-Authorization may be logged in the debugging logs, allowing an intruder to access confidential information.

The vulnerability of the Elastick Stack Filebeat software for logging records is related to errors in the httpjson input data. As a result, the content of the http-request headers Authorization or Proxy-Authorization may be logged in the debugging logs. Exploiting this vulnerability can allow an...

ROS-20240726-08

Vulnerability in the httpjson component of Elastick Stack Filebeat is due to a bug in the input data of the httpjson, because of which the contents of the Authorization or Proxy-Authorization http-request header may into the debug logs. Exploitation of the vulnerability could allow an attacker...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: velero, argo-events, hugo-extended, step, flux-source-controller, trino, bank-vaults, kubescape, chezmoi, fluent-bit-plugin-loki, hugo, rook, sigstore-scaffolding, tkn, opentelemetry-collector-contrib, restic, druid, airflow, flux-kustomize-controller, harbor-registr...

CVE-2024-24788 vulnerabilities

Vulnerabilities for packages: mongo-tools, thanos, cue, skaffold, trust-manager-fips, zot, gops, gomplate, secrets-store-csi-driver-provider-azure, kube-bench, opentelemetry-collector-fips, conftest, harbor-registry, prometheus-mongodb-exporter-fips, oras, prometheus-redis-exporter-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, cass-operator-fips-no-pvc-delete, crossplane-provider-aws-s3, kaniko, atlantis, metacontroller, crossplane-provider-azure-authorization, litefs, rekor-fips, cert-exporter, kubernetes-dashboard, goreleaser, terraform-provider-sendgrid, flux,...

GHSA-XW73-RW38-6VJC vulnerabilities

Vulnerabilities for packages: pulumi, bom, skaffold, crane, zot, falcoctl, helm-operator-fips, up, vexctl, k3d, docker-credential-gcr, kargo, chartmuseum, cadvisor-fips, dagger, aactl, kots, k9s, tekton-chains, buildkitd, slsa-verifier, falcoctl-fips, guac, loki, nerdctl, policy-controller-fips,...

CVE-2024-24557 vulnerabilities

Vulnerabilities for packages: pulumi, bom, skaffold, crane, zot, falcoctl, helm-operator-fips, up, vexctl, k3d, docker-credential-gcr, kargo, chartmuseum, cadvisor-fips, dagger, aactl, kots, k9s, tekton-chains, buildkitd, slsa-verifier, falcoctl-fips, guac, loki, nerdctl, policy-controller-fips,...

CVE-2023-31413

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...

CVE-2023-31413

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...

Authorization

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...

CVE-2023-31413

Elastic Stack Filebeat versions through 7.17.9 and 8.6.2 contain a flaw within the httpjson input component. When debug logging is enabled, this vulnerability allows the contents of the Authorization or Proxy-Authorization HTTP request headers to be leaked into the logs. This information disclosu...

CVE-2023-31413

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...

CVE-2023-31413: Exposure of Sensitive Information to an Unauthorized Actor

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...

CVE-2023-31413

Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...

Elastic Filebeat 日志信息泄露漏洞

Elastic Filebeat is a lightweight data probe for forwarding and centralizing log data from Elastic Netherlands. A security vulnerability exists in Elastic Filebeat versions 7.17.9 through 8.6.2. An attacker exploited the vulnerability to cause the contents of the http request Authorization or...

Vulnerabilities fixed in Elastic products

Vulnerabilities have been fixed in the Kibana and Filebeat products from Elastic. These vulnerabilities allow an attacker to perform cross-site scripting attacks, read system data such as read logs or execute arbitrary code under user privileges. The vulnerability with attribute CVE-2023-31415 in...

Elastic Stack 8.7.0, 7.17.10 Security Updates

Filebeat Information Exposure ESA-2023-04 A flaw was discovered in the Filebeat httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled. Affected Versions: All filebeat versions through 7.17.9 and 8.6....

PT-2023-9265 · Elastic +1 · Filebeat +1

Name of the Vulnerable Software and Affected Versions: Filebeat versions through 7.17.9 and 8.6.2 Description: The issue is related to a flaw in the httpjson input of Filebeat, which allows the contents of the http request Authorization or Proxy-Authorization header to be leaked in the logs when...

Grafiki - Threat Hunting Tool About Sysmon And Graphs

Grafiki is a Django project about Sysmon and graphs, for the time being. In my opinion EventViewer, Elastic and even Kibana, are not graphic enough. The current threats are complicated and if attackers think in graphs, defenders also must do it. This is a proof of concept, the code was not debugg...

S1EM - This Project Is A SIEM With SIRP And Threat Intel, All In One

Today, cyber attacks are more numerous and cause damage in companies. Nevertheless, many software products exist to detect cyber threats. The S1EM solution is based on the principle of bringing together the best products in their field, free of charge, and making them quickly interoperable. S1EM ...