ElasticLogstash*
2 matches found
CVE-2019-7612
CVE-2019-7612 affects Logstash: versions before 5.6.15 and 6.6.1 are vulnerable to a sensitive data disclosure where credentials used in a URL can be logged in error messages due to malformed URL logging. Root cause: improper handling of URL logging in Logstash configuration. Impact: potential ex...
9.8CVSS9.1AI score0.02407EPSS
Save
CVE-2018-3817
CVE-2018-3817 : Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information when emitting warnings about deprecated settings. Impact : information disclosure if deprecated settings are logged. Affected versions : Logstash <5.6.6 and
6.5CVSS6.4AI score0.01037EPSS
Save