CVE-2016-1000221 Logstash Logs Sensitive Information
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems logstash-core(RubyGems) | < 2.3.4 | 2.3.4 |
| rubygems logstash-core(RubyGems) | = 1.5.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.beta2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc1.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc2.snapshot | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot6 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.snapshot2 | No fix listed |
Show 50 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems logstash-core(RubyGems) | = 1.5.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.6 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.beta1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.beta2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.beta3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.rc1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.0.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.4.snapshot1 | No fix listed |
| Elastic logstash | <= 2.3.3 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- www.elastic.co vendor-advisory
- web.archive.org
- github.com patch
- github.com
- github.com product
- 99126 third-party-advisory vdb-entry