Description (CNA)
Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Elastic / Filebeat | affected versions through 7.17.9 and 8.6.2 |
CWE
CWE-200
References
- https://www.elastic.co/community/security/
- https://discuss.elastic.co/t/elastic-stack-8-7-0-7-17-10-security-updates/332327
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.