CVE-2016-10362

Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.

Date published : 2017-06-16

http://www.securityfocus.com/bid/99154

https://www.elastic.co/community/security