CVE-2025-37730
Logstash Improper Certificate Validation in TCP output
Summary
Logstash Improper Certificate Validation in TCP output
Original description
The description as published by the source.
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co