CVE-2017-14730
Published Sep 25, 2017The init script in the Gentoo app-admin/logstash-bin package before 5.5.3 and 5.6.x before 5.6.1 has "chown -R" calls for user-writable directory trees, which allows local users t…
Vendor/product archive
elasticsearch / logstash CVEs
Beta · best-effort3 CVEs tagged to elasticsearch / logstash — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.
CVE-2015-5619
Published Aug 9, 2017Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might al…
CVE-2015-5378
Published Jun 27, 2017Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Showing 1-3 of 3 CVEsPage 1 of 1