CVE-2016-10362 Logstash Logs Sensitive Information
MediumCVSS 6.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems logstash-core(RubyGems) | < 5.0.1 | 5.0.1 |
| rubygems logstash-core(RubyGems) | = 1.5.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.beta2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc1.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc2.snapshot | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc3.snapshot6 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.rc4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.2.snapshot2 | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| rubygems logstash-core(RubyGems) | = 1.5.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.4.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 1.5.6 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.beta1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.beta2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.beta3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.0.rc1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.0.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.0.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.1.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.0.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.2.4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.0.snapshot5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.3.4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.4.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.4.0.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.4.0.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.4.0.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.4.0.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 2.4.1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha1.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha1.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha2.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha2.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot6 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot7 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha3.snapshot8 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha4.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha4.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha4.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha5.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha6.snapshot1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha6.snapshot2 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha6.snapshot3 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha6.snapshot4 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.alpha6.snapshot5 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.pre.beta1 | No fix listed |
| rubygems logstash-core(RubyGems) | = 5.0.0.pre.rc1 | No fix listed |
| elasticsearch output plugin | <= 5.0.0 | No fix listed |
| Elastic logstash | = before 5.0.1 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- www.elastic.co vendor-advisory
- web.archive.org
- github.com
- github.com product
- 99154 third-party-advisory vdb-entry