description: Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
problem types: CWE-532: Information Exposure Through Log Files
affected:
{
product: Logstash
vendor: Elastic
versions:
status: affected, version: before 5.0.1
}