CVE-2025-37730
Logstash Improper Certificate Validation in TCP output
Résumé
Logstash Improper Certificate Validation in TCP output
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web discuss.elastic.co