CVE-2016-1000221

CVE-2016-1000221 describes a sensitive information disclosure vulnerability in Logstash versions prior to 2.3.4, specifically within the Elasticsearch Output plugin. This flaw caused HTTP authorization headers, potentially containing sensitive data, to be logged to a file. With a CVSS v3 score of 7.5 (HIGH), this vulnerability is easily exploitable over a network with low attack complexity, leading to a high impact on confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.