high7.5
CVE-2015-5378
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Impact
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Elastic | Logstash | Versions 1.4.0, 1.4.1, 1.4.2 |
| Elasticsearch | Logstash | Versions 1.4.3, 1.5.0, 1.5.1, 1.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html
- http://www.securityfocus.com/archive/1/536050/100/0/threaded
- http://www.securityfocus.com/archive/1/536859/100/0/threaded
- http://www.securityfocus.com/bid/76015
- https://www.elastic.co/community/security
- http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html
- http://www.securityfocus.com/archive/1/536050/100/0/threaded
- http://www.securityfocus.com/archive/1/536859/100/0/threaded
- http://www.securityfocus.com/bid/76015
- https://www.elastic.co/community/security