PT-2025-19904 · Logstash · Logstash

Ismisepaul · Published 2025-05-06 · Updated 2025-05-08 · CVE-2025-37730

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Logstash (affected versions not specified)

Description The issue is related to improper certificate validation in Logstash's TCP output, which could lead to a man-in-the-middle (MitM) attack in "client" mode. This occurs because hostname verification in TCP output was not being performed when the ssl verification mode was set to full.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BIT-LOGSTASH-2025-37730

CVE-2025-37730

Affected Products

Logstash

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-37730 · Security Note
• https://osv.dev/vulnerability/BIT-logstash-2025-37730 · Vendor Advisory
• https://twitter.com/cybercronai/status/1920135428587356566 · Twitter Post
• https://discuss.elastic.co/t/logstash-8-17-6-8-18-1-and-9-0-1-security-update-esa-2025-08/377869 · Note
• https://twitter.com/CVEnew/status/1919812017663168578 · Twitter Post
• https://t.me/cvedetector/24643 · Telegram Post
• https://t.me/cvetracker/23200 · Telegram Post
• https://twitter.com/autumn_good_35/status/1920478731501506718 · Twitter Post