CVE-2019-7613 Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic winlogbeat | < 5.6.16 | 5.6.16 |
| Elastic winlogbeat | >= 6.0.0, < 6.6.2 | 6.6.2 |
| Elastic logstash | = before 5.6.16 and 6.6.2 | No fix listed |
References
- discuss.elastic.co vendor-advisory
- www.elastic.co vendor-advisory