PT-2023-7174 · Elastic · Logstash
CVE-2023-46672
·
Publicado
2023-11-15
·
Atualizado
2024-03-06
CVSS v3.1
8.4
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Elastic Logstash (affected versions not specified)
Description
The issue is related to the disclosure of sensitive information through log files in Elastic Logstash. This can occur when Logstash is configured to log in JSON format, which is not the default logging format, and sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Insertion into Log File
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Logstash