PT-2023-7174 · Elastic · Logstash

Published 2023-11-15 · Updated 2024-03-06 · CVE-2023-46672

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Elastic Logstash (affected versions not specified)

Description The issue is related to the disclosure of sensitive information through log files in Elastic Logstash. This can occur when Logstash is configured to log in JSON format, which is not the default logging format, and sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2023-08201

BIT-LOGSTASH-2023-46672

CVE-2023-46672

Affected Products

Logstash

References · 10

• https://elastic.co/community/security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46672 · Security Note
• https://osv.dev/vulnerability/CVE-2023-46672 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-logstash-2023-46672 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08201 · Security Note
• https://t.me/cvenotify/68654 · Telegram Post
• https://twitter.com/Esparta6108713/status/1750525841128476899 · Twitter Post
• https://security.netapp.com/advisory/ntap-20240125-0002 · Note
• https://discuss.elastic.co/t/logstash-8-11-1-security-update-esa-2023-26/347191 · Note
• https://security.netapp.com/advisory/ntap-20240229-0001 · Note