Improper Certificate Validation

Overview logstash-output-tcp is an a Logstash plugin required to be installed on top of the Logstash core pipeline using $LSHOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program. Affected versions of this package are vulnerable to Improper Certificate Validation due to t...

CVE-2025-37730 Logstash Improper Certificate Validation in TCP output

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...