Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/11/2023 Updated: 21/03/2024

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 0

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances. The prerequisites for the manifestation of this issue are: * Logstash is configured to log in JSON format www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html , which is not the default logging format. * Sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.

Vulnerable Product	Search on Vulmon	Subscribe to Product
elastic logstash
elastic logstash 7.12.1

CWE-532 https://discuss.elastic.co/t/logstash-8-11-1-security-update-esa-2023-26/347191 https://www.elastic.co/community/security https://security.netapp.com/advisory/ntap-20240125-0002/https://security.netapp.com/advisory/ntap-20240229-0001/https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-46672

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect