Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2015-5378

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.

CVSS 3.0 · 7.5 High EPSS 2.5% KEV · Not listed
Vendors
Elastic Elasticsearch
Products
Logstash Logstash
CVE-2015-5619

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.

CVSS 3.0 · 5.9 Medium EPSS 1.2% KEV · Not listed
Vendors
Elastic Elasticsearch
Products
Logstash Logstash
CVE-2017-14730

The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users to gain privileges by leveraging access to a $LS_USER account for creation of a hard link.

CVSS 3.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Elasticsearch Gentoo
Products
Logstash Linux