CVE-2016-10362CWE-532

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials

published June 16, 2017

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01092 · 65.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2017-06-16T21:00Z
EPSS history
Timeline
  • 16 JUN 21:00Z
    Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials
    cvelistv5