CVE-2015-5378
HighSummary
Logstash versions 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allow remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Risk Assessment
Attackers can intercept sensitive data transmitted between the agent and the server, potentially leading to information disclosure and security breaches.
Recommendation
It is recommended to upgrade Logstash to version 1.5.3 or 1.4.4 to secure communications against unauthorized access.
Other vulnerabilities in Logstash
See all- CVE-2016-10363High
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, are vulnerable to denial of service attacks. A remote attacker can exploit crafted Netflow v5, Netflow v9, or IPFIX packets, causing the Logstash process to crash.
- CVE-2016-1000222High
Logstash versions prior to 2.1.2 are vulnerable to attacks via engineered input that can create malicious formulas in CSV data.
- CVE-2026-33466High
Logstash contains a path traversal vulnerability (CWE-22) in archive extraction utilities. An attacker can supply a crafted archive, allowing arbitrary file write with Logstash process privileges. In configurations with automatic pipeline reloading, this can lead to remote code execution.
Original NVD description (English source)
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.