CVE-2016-1000221 Elasticsearch Logstash Information Disclosure Vulnerability (ESA-2016-02)

ElasticSearch Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite 'stash'.

Prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

Affected Versions:
ElasticSearch Logstash versions prior to 2.3.4 QID Detection Logic (Authenticated):
This QID checks for the installed Logstash package.

A remote attacker could exploit this vulnerability to execute arbitrary code in the context of the affected application. Failed exploits will result in denial-of-service conditions.

Customers are advised to upgrade to the latest version of Logstash. Refer to Logstash Downloads for more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

ESA-2016-02 (Elasticsearch Logstash )