Critical severity9.8NVD Advisory· Published Mar 25, 2019· Updated Jun 17, 2026

CVE-2019-7612

Description

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Elastic/Logstash2 versions
cpe:2.3:a:elastic:logstash:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elastic:logstash:*:*:*:*:*:*:*:*range: <5.6.15
- (no CPE)range: before 5.6.15 and 6.6.1
NetApp/Active Iq Performance Analytics Services
cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:*:*:*:*:*:*:*
Logstash/Logstashllm-fuzzy
Range: <5.6.15, <6.6.1

Patches

Vulnerability mechanics

References

discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077nvdVendor Advisory
security.netapp.com/advisory/ntap-20190411-0002/nvdThird Party Advisory
www.elastic.co/community/securitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000