description: A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.
problem types: CWE-209: Information Exposure Through an Error Message
affected:
{
product: Logstash
vendor: Elastic
versions:
status: affected, version: before 5.6.15 and 6.6.1
}