8 matches found
EUVD-2022-2178
Malicious code in bioql PyPI...
EUVD-2022-5343
Malicious code in bioql PyPI...
CVE-2016-1000221
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...
CVE-2016-10362
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials...
CVE-2016-1000221: Exposure of Sensitive Information to an Unauthorized Actor
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information...
PT-2017-7672
Name of the Vulnerable Software and Affected Versions Logstash versions prior to 2.3.4 Description The issue concerns the logging of HTTP authorization headers by the Elasticsearch Output plugin, which could potentially contain sensitive information. Recommendations For versions prior to 2.3.4,...
CVE-2016-10362: Insertion of Sensitive Information into Log File
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials...
PT-2017-7878
Name of the Vulnerable Software and Affected Versions Logstash versions prior to 5.0.1 Description The issue concerns the Elasticsearch Output plugin in Logstash. When updating connections after sniffing, the plugin would log HTTP basic auth credentials to a file. Recommendations For versions pri...