Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2015-5619
4.3
MEDIUMCVSS v2
Published
August 9, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.
elastic/logstash
GitHubLogstash - transport and process your logs, events, or other data
GitHubLogstash - transport and process your logs, events, or other data= 1.5.3, = 1.4.4, = 1.5.1, = 1.4.3, = 1.5.0, = 1.5.2, = 1.4.1, = 1.4.2, = 1.4.0NVD