CVEvulnerability
CVE-2015-5619
5.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-08-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-295
Description
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.
Affected configurations
• elastic logstash 1.4.0
• elastic logstash 1.4.1
• elastic logstash 1.4.2
• elasticsearch logstash 1.4.3
• elasticsearch logstash 1.4.4
• elasticsearch logstash 1.5.0
• elasticsearch logstash 1.5.1
• elasticsearch logstash 1.5.2
• elasticsearch logstash 1.5.3
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/536294/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/536858/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/76455 Third Party Advisory, VDB Entry
- https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released Vendor Advisory
- http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/536294/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/536858/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/76455 Third Party Advisory, VDB Entry
- https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released Vendor Advisory