Vulnerabilities > Elasticsearch

DATE CVE VULNERABILITY TITLE RISK
2017-06-16 CVE-2016-10362 Information Exposure vulnerability in Elasticsearch Output Plugin 2.3.3/5.0.0
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
network
low complexity
elasticsearch CWE-200
6.5