Approved changes feed: RSS · Atom

cpe:2.3:a:elastic:logstash:1.4.2:*:*:*:*:*:*:*

part: a version: 1.4.2 update: *

VendorElastic (1d0b8d2a-fd47-5b20-b005-34326f9bd037)
ProductLogstash (583fe5fc-dd43-51b3-bf4d-e6399cb079bf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/elastic/logstash purl2cpe 2026-06-01 10:15:14.205085
pkg:sourceforge/logstash.mirror purl2cpe 2026-06-01 10:15:14.205087

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5619 vulnerable 2026-06-03 14:35:00.245006 Details available
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.
Published: 2017-08-09T16:00:00.000Z
Updated: 2024-08-06T06:59:02.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5378 vulnerable 2026-06-03 14:34:59.607281 Details available
Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logstash server.
Published: 2017-06-27T20:00:00.000Z
Updated: 2024-08-06T06:50:00.896Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.