GHSA-XC9X-JJ77-9P9J vulnerabilities

Vulnerabilities for packages: logstash...

GHSA-XC9X-JJ77-9P9J vulnerabilities

Vulnerabilities for packages: logstash...

The vulnerability of the server-side data processing pipeline in Elastic Logstash, related to the disclosure of information through registration files, allows attackers to disclose protected information.

The vulnerability of the server-side data processing pipeline in Elastic Logstash relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security measures...

GHSA-RCJC-C4PJ-XXRP vulnerabilities

Vulnerabilities for packages: hadoop-fips, druid, logstash-integration-jdbc, spark, spark-fips...

GHSA-RCJC-C4PJ-XXRP vulnerabilities

Vulnerabilities for packages: druid, spark, logstash-integration-jdbc...

CVE-2022-46337 vulnerabilities

Vulnerabilities for packages: druid, spark, logstash-integration-jdbc...

CVE-2022-46337 vulnerabilities

Vulnerabilities for packages: hadoop-fips, druid, logstash-integration-jdbc, spark, spark-fips...

SUSE CVE-2023-46672

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

Vulnerabilities fixed in Elastic Kibana and Logstash

Elastic has fixed vulnerabilities in Kibana and Logstash. The vulnerability with reference CVE-2023-46671 is located in Kibana and allows an authenticated malicious party to obtain sensitive data from the log, such as api keys, user credentials and system credentials. The vulnerability with...

Elastic Logstash 8.10.x < 8.11.1 Information Disclosure Vulnerability (ESA-2023-26)

Elastic Logstash is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-46672

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

Design/Logic Flaw

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

CVE-2023-46672 Logstash Insertion of Sensitive Information into Log File

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

CVE-2023-46672

CVE-2023-46672 affects Elastic Logstash. Under specific conditions, sensitive data can be recorded in Logstash logs: Logstash must be configured to log in JSON format (not the default) and a variable in the Logstash configuration must reference data stored in the Logstash keystore. Affected versi...

CVE-2023-46672 Logstash Insertion of Sensitive Information into Log File

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

Logstash 8.11.1 Security Update (ESA-2023-26)

Logstash Insertion of Sensitive Information into Log File ESA-2023-26 An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: Logstash is configured to log in JSON format...

Elastic Logstash Log Information Disclosure Vulnerability

Elastic Logstash is a suite of log analysis and monitoring tools from Dutch company Elastic. A security vulnerability exists in Elastic Logstash versions prior to 8.11.1, which stems from the fact that sensitive information can be recorded in Logstash logs under certain circumstances...

ROS-20230928-01

A vulnerability in the Logstash log management system is related to a flaw in TLS certificate validation. Exploitation of the vulnerability could allow an attacker acting remotely to launch a man-in-the-middle attack on Logstash monitoring data. "man-in-the-middle" attack on Logstash monitoring d...

Information Exposure

Overview logstash-core is a scalable log and event management tool. Affected versions of this package are vulnerable to Information Exposure. Elasticsearch Output plugin would log to file HTTP basic auth credentials when updating connections after sniffing. Remediation Upgrade logstash-core to...

Information Exposure

Overview logstash-core is a scalable log and event management tool. Affected versions of this package are vulnerable to Information Exposure. Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information. Remediation Upgrade logstash-core to...