Product

elasticsearch output plugin vulnerabilities

1 published CVE affecting elasticsearch output plugin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest elasticsearch output plugin CVEs

Newest publication first

CVE-2016-10362 Logstash Logs Sensitive Information
Published 2017-06-16

MediumCVSS 6.5 EPSS 1.1%

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

elasticsearch output plugin vulnerabilities

Latest elasticsearch output plugin CVEs

CVE-2016-10362 Logstash Logs Sensitive Information