CVE-2015-5619

MEDIUM 5.9CVE-2015-5619 · Published 09/08/2017 · updated 17/06/2026

In short

CVE-2015-5619 is a MEDIUM (CVSS 5.9) vulnerability affecting logstash (elastic), logstash (elasticsearch).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
logstash elastic	`= 1.4.0= 1.4.1= 1.4.2`	No fix yet
logstash elasticsearch	`= 1.4.3= 1.4.4= 1.5.0= 1.5.1= 1.5.2= 1.5.3`	No fix yet

Description

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.

References

packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html · Third Party Advisory
securityfocus.com/archive/1/536294/100/0/threaded
securityfocus.com/archive/1/536858/100/0/threaded
securityfocus.com/bid/76455 · Third Party Advisory
elastic.co/blog/logstash-1-5-4-and-1-4-5-released · Vendor Advisory

More vulnerabilities in logstash

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

logstash

elastic

= 1.4.0= 1.4.1= 1.4.2

No fix yet

logstash

elasticsearch

= 1.4.3= 1.4.4= 1.5.0= 1.5.1= 1.5.2= 1.5.3

No fix yet

More vulnerabilities in logstash

See all →