CVE-2023-46672

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific circumstances.

The prerequisites for the manifestation of this issue are:

* Logstash is configured to log in JSON format https://www.elastic.co/guide/en/logstash/current/running-logstash-command-line.html , which is not the default logging format.

* Sensitive data is stored in the Logstash keystore and referenced as a variable in Logstash configuration.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

VendorProductVersions
ElasticLogstash>= 8.10.0, < 8.11.1

References

Timeline

Published
Nov 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-466737.5It was identified that malformed scripts used in the script processor of an Ingest Pipeline could cause an Elasticsearch node to crash when CVE-2023-466747.8An issue was identified that allowed the unsafe deserialization of java objects from hadoop or spark configuration properties that could havCVE-2023-466756.5An issue was discovered by Elastic whereby sensitive information may be recorded in Kibana logs in the event of an error or in the event wheCVE-2023-466779.8Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname' parameter of the sign-up.phpCVE-2023-466799.8Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txt_uname_email' parameter of the indexCVE-2023-46687.5The Ad Inserter for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.30 via the ai-debug-procCVE-2023-466817.8Improper neutralization of argument delimiters in a command ('Argument Injection') vulnerability in VR-S1000 firmware Ver. 2.37 and earlier CVE-2023-466837.2A post authentication command injection vulnerability exists when configuring the wireguard VPN functionality of Tp-Link ER7206 Omada GigabCVE-2023-466859.8A hard-coded password vulnerability exists in the telnetd functionality of LevelOne WBR-6013 RER4_A_v3411b_2T2R_LEV_09_170623. A set of specCVE-2023-466867.1A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre DiagCVE-2023-466879.8In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands iCVE-2023-466886.1Open redirect vulnerability in Pleasanter 1.3.47.0 and earlier allows a remote unauthenticated attacker to redirect users to arbitrary web s
CVE-2023-46672: Medium severity, CVSS 5.5 | Vulnix