3 matches found
Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability - Linux
Elastic Logstash is prone to a security bypass vulnerability. This VT has been deprecated and merged into the VT VT SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability
Elastic Logstash is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:elastic:logstash";...
PT-2017-6875
Name of the Vulnerable Software and Affected Versions Logstash versions 1.4.x through 1.4.4 Logstash versions 1.5.x through 1.5.3 Description The issue concerns the lack of validation of SSL/TLS certificates from the Logstash server when using Lumberjack output or the Logstash forwarder. This cou...