High severity7.5NVD Advisory· Published Jun 27, 2017· Updated May 13, 2026

CVE-2015-5378

Description

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.

Affected products

Elastic/Logstash3 versions
cpe:2.3:a:elastic:logstash:1.4.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:elastic:logstash:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:elastic:logstash:1.4.0:*:*:*:*:*:*:*
Elasticsearch/Logstash4 versions
cpe:2.3:a:elasticsearch:logstash:1.4.3:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:elasticsearch:logstash:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:elasticsearch:logstash:1.5.2:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.htmlnvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/76015nvdThird Party AdvisoryVDB Entry
www.elastic.co/community/securitynvdVendor Advisory
www.securityfocus.com/archive/1/536050/100/0/threadednvd
www.securityfocus.com/archive/1/536859/100/0/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000