← All advisories

High severity7.5NVD Advisory· Published Jun 16, 2017· Updated Jun 17, 2026

CVE-2016-1000221

CVE-2016-1000221

Description

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
logstash-coreRubyGems	< 2.3.4	2.3.4

Affected products

2

Elastic/Logstash
cpe:2.3:a:elastic:logstash:*:*:*:*:*:*:*:*
Range: <=2.3.3
ghsa-coords
pkg:gem/logstash-core
Range: < 2.3.4

Patches

Vulnerability mechanics

References

6

www.securityfocus.com/bid/99126nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-vcmm-ppqx-95chghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-1000221ghsaADVISORY
www.elastic.co/community/securitynvdVendor AdvisoryWEB
github.com/elastic/logstash/commit/0999050144adad7f4d99d43e561c2882fd7c512bghsaWEB
web.archive.org/web/20210124065200/http://www.securityfocus.com/bid/99126ghsaWEB

News mentions

0

No linked articles in our index yet.