A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.
References
| Link | Resource |
|---|---|
| https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077 | Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20190411-0002/ | Third Party Advisory |
| https://www.elastic.co/community/security | Vendor Advisory |
| https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077 | Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20190411-0002/ | Third Party Advisory |
| https://www.elastic.co/community/security | Vendor Advisory |
Configurations
History
21 Nov 2024, 04:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077 - Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20190411-0002/ - Third Party Advisory | |
| References | () https://www.elastic.co/community/security - Vendor Advisory |
Information
Published : 2019-03-25 19:29
Updated : 2024-11-21 04:48
NVD link : CVE-2019-7612
Mitre link : CVE-2019-7612
CVE.ORG link : CVE-2019-7612
JSON object : View
Products Affected
netapp
- active_iq_performance_analytics_services
elastic
- logstash