CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

Design/Logic Flaw

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2143

Jenkins Logstash Plugin 2.3.1 and earlier transmits configured credentials in plain text as part of its global Jenkins configuration form, potentially resulting in their exposure...

CVE-2020-2143

Summary of CVE-2020-2143 (Jenkins Logstash Plugin): Jenkins Logstash Plugin versions up to 2.3.1 transmit credentials in plain text via the global Jenkins configuration form, creating exposure risk (e.g., through browser extensions or XSS). The issue stems from how credentials are handled in the ...

PT-2020-15354 · Jenkins · Jenkins Logstash Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Logstash Plugin versions 2.3.1 and earlier Description: The issue concerns the transmission of configured credentials in plain text as part of the global Jenkins configuration form. This potentially results in their exposure through...

Photon OS 3.0: Logstash PHSA-2019-3.0-0046

An update of the logstash package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0046. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133062;...

Security Bulletin: IBM API Connect is impacted by a vulnerability in Elastic Logstash (CVE-2019-7612)

Summary IBM API Connect has addressed the following vulnerability. Vulnerability Details CVEID: CVE-2019-7612 DESCRIPTION: A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash...

Photon OS 2.0: Logstash PHSA-2019-2.0-0194

An update of the logstash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0194. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Logstash PHSA-2019-1.0-0260

An update of the logstash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0260. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Important Photon OS Security Update - PHSA-2019-3.0-0046

Updates of 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'logstash' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2019-0046

Updates of 'logstash', 'linux-esx', 'linux', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0194

An update of 'logstash' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2019-0194

Updates of 'linux-aws', 'linux-secure', 'logstash', 'linux-esx', 'linux' packages of Photon OS have been released...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0260

An update of 'logstash', 'gc' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2019-0260

Updates of 'gc', 'logstash' packages of Photon OS have been released...

Elastic Logstash Beats Input Plugin DoS Vulnerability (ESA-2019-14)

Elastic Logstash is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Denial Of Service (DoS)

logstash-input-beats is vulnerable to denial of service. The attack is due to a lack of proper handling of invalid compressed content, allowing an attacker to provide malicious compressed content to trigger the attack...

Denial Of Service(DoS)

Logstash is vulnerable to denial of service DoS. When an unauthenticated user is using Beats input plugin with Logstash and is able to connect to the port the Logstash beats input, malicious network packets sent by user could result in nonresponsiveness...

CVE-2019-7620

Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to connect to the port the Logstash beats input could send a specially crafted network packet that would cause Logstash to stop responding...