CVE-2018-3817CWE-532

CVE-2018-3817: vulnerability in Elastic Logstash

Published · Updated

Follow this CVE+ Monitor Logstash

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.
Affected products
Elastic · Logstash
Related CVEs — Elastic Logstash

In the same product, most dangerous first.

CVE-2019-7612—CVE-2019-7612EPSS 2.4%CVE-2019-7620—CVE-2019-7620EPSS 2.1%CVE-2016-10363—CVE-2016-10363EPSS 1.5%CVE-2019-7613—CVE-2019-7613EPSS 1.3%CVE-2016-10362—CVE-2016-10362EPSS 1.1%CVE-2026-33466HIGHImproper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File WriteEPSS 0.6%