Approved changes feed: RSS · Atom

cpe:2.3:a:elasticsearch:logstash:1.4.3:*:*:*:*:*:*:*

part: a version: 1.4.3 update: *

VendorElasticsearch (453210ca-2d0c-5f06-95bd-23f75cccb6c2)
ProductLogstash (5cfc1d7d-581e-5214-802e-e47df4e51486)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:Docker/logstash purl2cpe 2026-06-01 10:16:25.392397
pkg:github/elastic/logstash purl2cpe 2026-06-01 10:16:25.392400
pkg:sourceforge/logstash.mirror purl2cpe 2026-06-01 10:16:25.392403

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5619 vulnerable 2026-06-08 05:06:50.556664 Details available
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.
Published: 2017-08-09T16:00:00.000Z
Updated: 2024-08-06T06:59:02.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5378 vulnerable 2026-06-08 05:06:49.926808 Details available
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Published: 2017-06-27T20:00:00.000Z
Updated: 2024-08-06T06:50:00.896Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.