Security Advisory

CVE-2019-7612

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-03-25 18:34:06
Last updated 2024-08-04 20:54:28
Assigner elastic
State PUBLISHED

Description

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.