Description
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Elastic | Logstash | before 5.0.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | logstash-core | < 5.0.1 | 5.0.1 | GHSA-3gg4-6hqg-2vjx |