ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2016-1000221

—
CVSS 3.0
7.5 high
EPSS
2%p77
Published
()
Modified
Description

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

Vendors
elastic
Products
logstash
Weakness
CWE-200
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news

No ingested article mentions this CVE yet.