CVE-2016-1000221: Elastic Logstash

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

Affected products

• Elastic Logstash: up to and including 2.3.3

Published 2017-06-16. Last modified 2026-06-17.