Information Disclosure in Filebeat by Elastic

CVE-2023-31413

What is CVE-2023-31413?

Filebeat, a lightweight data shipper for logs, contains a vulnerability that may cause sensitive information to be inadvertently logged. Specifically, when debug logging is enabled, contents of the Authorization or Proxy-Authorization headers sent in HTTP requests can be exposed. This oversight could potentially compromise credentials, allowing unauthorized access to sensitive resources. It is crucial for users of affected Filebeat versions to be aware of this issue and to apply security measures promptly.

References