Lucene search
PRIOn knowledge basePRION:CVE-2021-22138HistoryMay 13, 2021 - 6:15 p.m.
Security feature bypass
2021-05-1318:15:00
PRIOn knowledge base
www.prio-n.com
11
In Logstash versions after 6.4.0 and before 6.8.15 and 7.12.0 a TLS certificate validation flaw was found in the monitoring feature. When specifying a trusted server CA certificate Logstash would not properly verify the certificate returned by the monitoring server. This could result in a man in the middle style attack against the Logstash monitoring data.
Related
ibm
ibm
cvelist
cvelist
CVE-2021-22138
2021-05-13 17:35:19
veracode
veracode
Man-in-the-middle (MITM)
2021-04-28 08:01:01
osv
osv
BIT-logstash-2021-22138
2024-03-06 10:55:30
CVE-2021-22138
2021-05-13 18:15:09
openvas
openvas
Elastic Logstash Certificate Verification Bypass Vulnerability (ESA-2021-09)
2021-05-14 00:00:00
nvd
nvd
CVE-2021-22138
2021-05-13 18:15:09
cve
cve
CVE-2021-22138
2021-05-13 18:15:09
redos
redos
ROS-20230928-01
2023-09-28 00:00:00