Skip to content
OpenAdvisories

Package · RubyGems

logstash-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2016-1000221

    Logstash Logs Sensitive Information

    Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

    logstash-core RubyGems
  • Medium 6.5
    CVE-2016-10362

    Logstash Logs Sensitive Information

    Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

    Elastic Logstash logstash-core RubyGems