CVEs-PoC/2015/CVE-2015-5619.md

CVE-2015-5619

Description

Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might allow attackers to obtain sensitive information via a man-in-the-middle attack.

POC

Reference

• http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html
• http://packetstormsecurity.com/files/133269/Logstash-1.5.3-Man-In-The-Middle.html

Github

No PoCs found on GitHub currently.