CVE-2015-5378 Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Elastic logstash | = 1.4.0 | No fix listed |
| Elastic logstash | = 1.4.1 | No fix listed |
| Elastic logstash | = 1.4.2 | No fix listed |
| elasticsearch logstash | = 1.4.3 | No fix listed |
| elasticsearch logstash | = 1.5.0 | No fix listed |
| elasticsearch logstash | = 1.5.1 | No fix listed |
| elasticsearch logstash | = 1.5.2 | No fix listed |
References
- packetstormsecurity.com third-party-advisory vdb-entry
- 20150721 Logstash vulnerability CVE-2015-5378 mailing-list
- 20151106 CVE-2015-5378 mailing-list
- 76015 third-party-advisory vdb-entry
- www.elastic.co vendor-advisory