{"id":"CVE-2018-3817","aliases":["EUVD-2018-15605","GHSA-m5wv-852x-cj2g","SUSE-SU-2018:2317-1","SUSE-SU-2018:2536-1"],"status":"published","title":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2...","description":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01017,"percentile":0.63558,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200","CWE-532"],"published":"2018-03-30T20:00:00Z","modified":"2026-10-24T10:30:50Z","affected":[{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"logstash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"logstash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0.1-5.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"logstash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openstack-monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180622_15.06-3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-1.8.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"kafka","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.10.2.2-5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"logstash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.1-5.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"monasca-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20180608_12.47-9.1"}]}],"bundled":3}],"products":[{"vendor":"elastic","product":"logstash"}],"references":[{"url":"https://discuss.elastic.co/t/elastic-stack-6-1-2-and-5-6-6-security-update/115763","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-3817"},{"url":"https://github.com/advisories/GHSA-m5wv-852x-cj2g"},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182317-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1090336","tags":["report"]},{"url":"https://bugzilla.suse.com/1090849","tags":["report"]},{"url":"https://bugzilla.suse.com/1094448","tags":["report"]},{"url":"https://bugzilla.suse.com/1095603","tags":["report"]},{"url":"https://bugzilla.suse.com/1096985","tags":["report"]},{"url":"https://bugzilla.suse.com/1097847","tags":["report"]},{"url":"https://bugzilla.suse.com/1101366","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-12099","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-3817","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182536-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1086909","tags":["report"]},{"url":"https://bugzilla.suse.com/1090192","tags":["report"]},{"url":"https://bugzilla.suse.com/1090343","tags":["report"]},{"url":"https://bugzilla.suse.com/1102920","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1288","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-3817","description":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.","status":"published","published":"2018-03-30T20:00:00Z","modified":"2024-08-05T04:57:22.973Z","cwes":["CWE-532"],"updated_at":"2026-11-02T14:35:05.262903Z"}],"euvd":[{"id":"EUVD-2018-15605","description":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.","status":"published","published":"2018-03-30T20:00:00Z","modified":"2024-08-05T04:57:22Z","updated_at":"2026-11-03T02:40:15.208866Z"}],"ghsa":[{"id":"GHSA-m5wv-852x-cj2g","title":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2...","description":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.","status":"published","published":"2022-05-13T01:32:17Z","modified":"2023-02-01T05:08:27Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:46.174982Z"}],"nvd":[{"id":"CVE-2018-3817","description":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.","status":"published","published":"2018-03-30T20:29:00.227Z","modified":"2026-06-17T01:57:50.35Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532","CWE-200"],"updated_at":"2026-11-02T14:04:24.700429Z"}],"osv":[{"id":"CVE-2018-3817","description":"When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information.","status":"published","published":"2018-03-30T20:29:00.227Z","modified":"2026-10-24T10:30:50.937743967Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"SUSE-SU-2018:2317-1","title":"Security update for grafana, kafka, logstash, openstack-monasca-installer","description":"This update for grafana, kafka, logstash, openstack-monasca-installer fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-12099: grafana: Fix XSS vulnerabilities in dashboard links (bsc#1096985).\n- CVE-2018-3817: logstash: Fix inadvertently logging of sensitive information (bsc#1090849).\n\nBug fixes:\n\n- bsc#1095603: Disable jmxremote debugging.\n- bsc#1097847: Make time series database schema setup conditional.\n- bsc#1094448: Set log rotation options.\n- bsc#1090336: Add complete set of elasticsearch performance tunables.\n- bsc#1101366: Fix build issues with s390x, ppc64le and aarch64.\n- Fix various spec errors affecting Leap 15 and Tumbleweed \n","status":"published","published":"2018-08-14T06:03:57Z","modified":"2026-02-04T03:13:39.555169Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2536-1","title":"Security update for grafana, kafka, logstash and monasca-installer","description":"This update for grafana, kafka, logstash and monasca-installer fixes the following issues:\n\nThe following security issues have been fixed:\n\ngrafana:\n\n- CVE-2018-12099: Fix Cross-Site-Scripting (XSS) vulnerabilities in dashboard links. (bsc#1096985)\n\nkafka:\n\n- CVE-2018-1288: Authenticated Kafka users may perform action reserved for the Broker via a manually created fetch\n  request interfering with data replication, resulting in data loss. (bsc#1102920)\n\nlogstash:\n\n- CVE-2018-3817: Fix potential leak of sensitive data when logging warnings about deprecated options. (bsc#1090849)\n\nAdditionally, the following non-security issues have been fixed:\n\nmonasca-installer:\n\n- Add complete set of elasticsearch performance tunables.\n- Update to version Build_20180427_14.04 (bsc#1090192, bsc#1090343)\n- Fix bad elasticsearch-curator configuration. (bsc#1090192)\n- Enable bootstrap.memory_lock for Elasticsearch. (bsc#1090343)\n\nlogstash:\n\n- Declare Gemfile as config to prevent loss of installed plugins when updating.\n- Stop installing prebuilt jruby for non-x86.\n\nkafka: \n\n- Update to version 0.10.2.2 (bsc#1102920, CVE-2018-1288)\n- Add noreplace directive for /etc/kafka/server.properties.\n- Reduce package ownership of tmpfiles.d to bare minium. (SLE12 SP2) \n- Set log rotation options. (bsc#1094448)\n- Disable jmxremote debugging. (bsc#1095603)\n- Increase open file limits. (bsc#1086909)\n","status":"published","published":"2018-08-28T09:05:28Z","modified":"2026-02-04T03:02:59.047298Z","updated_at":"2026-11-02T15:53:45.378228Z"}]}}