← All advisories

Medium severity6.5NVD Advisory· Published Jun 16, 2017· Updated Jun 17, 2026

CVE-2016-10362

CVE-2016-10362

Description

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
logstash-coreRubyGems	< 5.0.1	5.0.1

Affected products

3

Elastic/Output Plugin
cpe:2.3:a:elasticsearch:output_plugin:*:*:*:*:*:logstash:*:*
Range: <=5.0.0
ghsa-coords
pkg:gem/logstash-core
Range: < 5.0.1
Elastic/Logstashv5
Range: before 5.0.1

Patches

Vulnerability mechanics

References

5

www.securityfocus.com/bid/99154nvdThird Party AdvisoryVDB Entry
github.com/advisories/GHSA-3gg4-6hqg-2vjxghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-10362ghsaADVISORY
www.elastic.co/community/securitynvdVendor AdvisoryWEB
web.archive.org/web/20210730201452/http://www.securityfocus.com/bid/99154ghsaWEB

News mentions

0

No linked articles in our index yet.