CVE-2016-10362

EPSS 1.1%CWE-532

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

Affected products

Want to know if your infrastructure is exposed to this?

References