CVE-2018-3817

MEDIUM

Logstash < 5.6.6 and 6.x < 6.1.2 - Sensitive Information Disclosure in Deprecated Settings Log

Title source: llm
STIX 2.1

Description

When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.

References (1)

Core 1
Core References

Scores

CVSS v3 6.5
EPSS 0.0104
EPSS Percentile 59.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200 CWE-532
Status published
Products (1)
elastic/logstash < 5.6.6
Published Mar 30, 2018
Tracked Since Feb 18, 2026