← Vulnerability feed

Vulnerability record · CVE-2015-5619 · published 9 August 2017

CVE-2015-5619: Elastic logstash improper certificate validation vulnerability

Elastic · Logstash

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.

5.9 CVSS 3.0 Medium EPSS 1.2% · top 32.6% CWE-295 · Improper certificate validation
5.9CVSS 3.0 base score, v2 4.3
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
10References
17 Jun 2026Last modified by NVD

Description

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/536294/100/0/threaded
http://www.securityfocus.com/archive/1/536858/100/0/threaded
http://www.securityfocus.com/bid/76455 Third Party AdvisoryVDB Entry
https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released Vendor Advisory
http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html Third Party AdvisoryVDB Entry
http://www.securityfocus.com/archive/1/536294/100/0/threaded
http://www.securityfocus.com/archive/1/536858/100/0/threaded
http://www.securityfocus.com/bid/76455 Third Party AdvisoryVDB Entry
https://www.elastic.co/blog/logstash-1-5-4-and-1-4-5-released Vendor Advisory

Track CVE-2015-5619 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2026-33466Elastic logstash path traversal vulnerabilityImproper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code executi…EPSS 0.85%9.8CVE-2019-7612Elastic logstash error message information leak vulnerabilityA sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified …EPSS 2.4%7.8CVE-2017-14730Elasticsearch logstash incorrect permission assignment vulnerabilityThe init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory tre…EPSS 0.35%7.5CVE-2019-7620Elastic logstash uncontrolled resource consumption vulnerabilityLogstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin. An unauthenticated user who is able to …EPSS 2.1%7.5CVE-2015-5378Elastic logstash information exposure vulnerabilityLogstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash serve…EPSS 2.5%7.5CVE-2016-1000221Elastic logstash information exposure vulnerabilityLogstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.EPSS 1.8%7.5CVE-2016-1000222Elastic logstash argument injection vulnerabilityLogstash prior to version 2.1.2, the CSV output can be attacked via engineered input that will create malicious formulas in the CSV data.EPSS 1.1%7.5CVE-2016-10363Elastic logstash improper resource shutdown vulnerabilityLogstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets c…EPSS 1.5%

Source: NIST National Vulnerability Database (record CVE-2015-5619), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.