Test ID:	1.3.6.1.4.1.25623.1.0.107280
Category:	General
Title:	Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability - Linux
Summary:	Elastic Logstash is prone to a security bypass vulnerability.;; This VT has been deprecated and merged into the VT VT 'Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability'; (OID: 1.3.6.1.4.1.25623.1.0.107281)
Description:	Summary: Elastic Logstash is prone to a security bypass vulnerability. This VT has been deprecated and merged into the VT VT 'Elastic Logstash 'CVE-2015-5619' Man in the Middle Security Bypass Vulnerability' (OID: 1.3.6.1.4.1.25623.1.0.107281) Vulnerability Impact: Successfully exploiting this issue may allow attackers to perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks. Affected Software/OS: Elastic Logstash version prior to 1.5.4 or 1.4.5 on Linux. Solution: Users should update to 1.5.4 or 1.4.5. Users that do not want to upgrade can address the vulnerability by disabling the Lumberjack output. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2015-5619 BugTraq ID: 76455 http://www.securityfocus.com/bid/76455 Bugtraq: 20150821 Logstash vulnerability CVE-2015-5619 (Google Search) http://www.securityfocus.com/archive/1/536294/100/0/threaded Bugtraq: 20151106 CVE-2015-5619 (Google Search) http://www.securityfocus.com/archive/1/536858/100/0/threaded http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.