← Vulnerability feed

Vulnerability record · CVE-2019-7612 · published 25 March 2019

CVE-2019-7612: Elastic logstash error message information leak vulnerability

Elastic · Logstash

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.

9.8 CVSS 3.1 Critical EPSS 2.4% · top 16.6% CWE-209 · Error message information leakCWE-532 · Sensitive information in log file
9.8CVSS 3.1 base score, v2 5.0
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077 Vendor Advisory
https://security.netapp.com/advisory/ntap-20190411-0002/ Third Party Advisory
https://www.elastic.co/community/security Vendor Advisory
https://discuss.elastic.co/t/elastic-stack-6-6-1-and-5-6-15-security-update/169077 Vendor Advisory
https://security.netapp.com/advisory/ntap-20190411-0002/ Third Party Advisory
https://www.elastic.co/community/security Vendor Advisory

Track CVE-2019-7612 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-33466Elastic logstash path traversal vulnerabilityImproper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code executi…EPSS 0.85%7.8CVE-2019-7221Linux kernel use after free vulnerabilityThe KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.EPSS 0.80%7.8CVE-2018-17182Linux kernel use after free vulnerabilityAn issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An…EPSS 3.2%7.5CVE-2019-7620Elastic logstash uncontrolled resource consumption vulnerabilityLogstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to …EPSS 2.1%7.5CVE-2015-5378Elastic logstash information exposure vulnerabilityLogstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash serve…EPSS 2.5%7.5CVE-2016-1000221Elastic logstash information exposure vulnerabilityLogstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.EPSS 1.8%7.5CVE-2016-1000222Elastic logstash argument injection vulnerabilityLogstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.EPSS 1.1%7.5CVE-2016-10363Elastic logstash improper resource shutdown vulnerabilityLogstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets c…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2019-7612), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.