CVE-2023-46672

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-46672
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46672.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-46672
Aliases
Published
2023-11-15T08:05:26.561Z
Modified
2026-07-15T02:09:49.077821741Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N CVSS Calculator
Summary
Logstash Insertion of Sensitive Information into Log File
Details

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances.

The prerequisites for the manifestation of this issue are:

  • Logstash is configured to log in JSON format https://www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html , which is not the default logging format.

  • Sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "8.10.0"
                },
                {
                    "fixed": "8.11.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-532"
    ],
    "cna_assigner": "elastic",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/46xxx/CVE-2023-46672.json"
}
References

Affected packages

Git / github.com/elastic/logstash

Affected ranges

Type
GIT
Repo
https://github.com/elastic/logstash
Events
Introduced
8e5676d7c6e74b77f0d3db390b8422e8a6cb82dc
Fixed
a233e9273ba7bc754c28573b3e2bee90428945b0
Introduced
a0a95c823ae2da19a75f44a01784665e7ad23d15
Last affected
a0a95c823ae2da19a75f44a01784665e7ad23d15
Database specific 
{
    "cpe": [
        "cpe:2.3:a:elastic:logstash:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:elastic:logstash:7.12.1:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "8.10.0"
        },
        {
            "fixed": "8.11.1"
        },
        {
            "introduced": "7.12.1"
        },
        {
            "last_affected": "7.12.1"
        }
    ],
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ]
}

Affected versions

7.*
7.12.1
v7.*
v7.12.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-46672.json"