High severity7.5NVD Advisory· Published Jun 27, 2017· Updated Jun 17, 2026
CVE-2015-5378
CVE-2015-5378
Description
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:elastic:logstash:1.4.0:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:elastic:logstash:1.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.5.2:*:*:*:*:*:*:*
- (no CPE)range: 1.5.x before 1.5.3, 1.4.x before 1.4.4
Patches
Vulnerability mechanics
References
5- packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.htmlnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/76015nvdThird Party AdvisoryVDB Entry
- www.elastic.co/community/securitynvdVendor Advisory
- www.securityfocus.com/archive/1/536050/100/0/threadednvd
- www.securityfocus.com/archive/1/536859/100/0/threadednvd
News mentions
0No linked articles in our index yet.