Lucene search
Veracode Vulnerability DatabaseVERACODE:13540HistoryMar 26, 2019 - 2:28 a.m.
Information Disclosure
2019-03-2602:28:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.008 Low
EPSS
Percentile
81.7%
logstash-core is vulnerable to information disclosure attacks. The vulnerability exists when a malformed URI is used, and credentials can be logged in error messages, causing information disclosure attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| logstash-core | le | 6.6.0 | |
| logstash-core | le | 5.6.14 |
References
discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077
github.com/elastic/logstash/commit/c014aa71fdef5d83797c72ff5649f23a1fa020ab
github.com/elastic/logstash/commit/d11aa5a873f9314113977b950a50029a8e8c5e66
github.com/elastic/logstash/pull/10414
security.netapp.com/advisory/ntap-20190411-0002/
www.elastic.co/community/security
Related
nessus
nessus
Logstash ESA-2019-05
2019-03-20 00:00:00
archlinux
archlinux
[ASA-201902-28] logstash: information disclosure
2019-02-25 00:00:00
cvelist
cvelist
CVE-2019-7612
2019-03-25 18:34:06
nvd
nvd
CVE-2019-7612
2019-03-25 19:29:02
ibm
ibm
osv
osv
CVE-2019-7612
2019-03-25 19:29:02
prion
prion
Design/Logic Flaw
2019-03-25 19:29:00
openvas
openvas
Elastic Logstash Information Disclosure Vulnerability (ESA-2019-05)
2019-03-27 00:00:00
cve
cve
CVE-2019-7612
2019-03-25 19:29:02