-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/elastic/beats | go | >= 8.0.0, < 8.11.3 | 8.11.3 |
| github.com/elastic/beats/v7 | go | >= 7.0.0, < 7.17.16 | 7.17.16 |
| github.com/elastic/beats | go | >= 7.0.0, < 7.17.16 | 7.17.16 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from error logging that included raw event data. The commit diff shows removal of the 'event' parameter from s.log.Errorw in session.runProcessFunc, which previously logged b.Fields.String(). This matches the vulnerability description about sensitive data being logged at WARN/ERROR levels during ingestion failures. The function's error handling path directly corresponds to the described vulnerability mechanism.