CVE-2018-3817CWE-532

When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information

published March 30, 2018

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01017 · 63.0th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2018-03-30T20:00Z
EPSS history
Timeline
  • 30 MAR 20:00Z
    When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information
    cvelistv5