Unscored CVE-2015-5378 EUVD-2015-5334GHSA-g6rc-3fpq-w2gr

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logs…

Published Jun 27, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.

References

20150721 Logstash vulnerability CVE-2015-5378 mailing-list
http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html
20151106 CVE-2015-5378 mailing-list
76015 vdb-entry
https://www.elastic.co/community/security