PT-2017-6875 · Elastic · Logstash

Publicado 2017-08-09 · Atualizado 2019-06-17 · CVE-2015-5619

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Logstash versions 1.4.x through 1.4.4 Logstash versions 1.5.x through 1.5.3

Description The issue concerns the lack of validation of SSL/TLS certificates from the Logstash server when using Lumberjack output or the Logstash forwarder. This could allow attackers to intercept sensitive information via a man-in-the-middle attack.

Recommendations For Logstash versions 1.4.x through 1.4.4, update to version 1.4.5 or later. For Logstash versions 1.5.x through 1.5.3, update to version 1.5.4 or later.

Correção

Improper Certificate Validation

Enumeração de Fraquezas

CWE-295

Identificadores relacionados

CVE-2015-5619

Produtos afetados

Logstash

Referências · 6

• http://securityfocus.com/bid/76455 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5619 · Nota de Segurança
• http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html · Nota
• http://securityfocus.com/archive/1/536858/100/0/threaded · Nota
• https://elastic.co/blog/logstash-1-5-4-and-1-4-5-released · Aviso do Fabricante
• http://securityfocus.com/archive/1/536294/100/0/threaded · Nota