CVE-2016-1000221

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information

published June 16, 2017

CVSS
—
EPSS
2%
Percentile
78.1
In the wild
Unconfirmed
What it is

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01782 · 78.1th percentile
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information
    cvelistv5