CVE-2015-5619

EUVD-2015-5571
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.9 MEDIUM
NETWORK
HIGH
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 53%
Affected Products (NVD)
VendorProductVersion
elasticlogstash
1.4.0
elasticlogstash
1.4.1
elasticlogstash
1.4.2
elasticsearchlogstash
1.4.3
elasticsearchlogstash
1.4.4
elasticsearchlogstash
1.5.0
elasticsearchlogstash
1.5.1
elasticsearchlogstash
1.5.2
elasticsearchlogstash
1.5.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html
http://www.securityfocus.com/archive/1/536294/100/0/threaded
http://www.securityfocus.com/archive/1/536858/100/0/threaded
http://www.securityfocus.com/bid/76455
https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released
http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html
http://www.securityfocus.com/archive/1/536294/100/0/threaded
http://www.securityfocus.com/archive/1/536858/100/0/threaded
http://www.securityfocus.com/bid/76455
https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released