onyx

onyx --cves cve-2015-5378

CVE-2015-5378

HIGHPOCElasticsearch
score
<0.1
cvss
7.5
epss
2.5%
published
2017-06-27
kev added
—
first seen

Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 contain a vulnerability that allows remote attackers to read communications between Logstash Forwarder agent and Logstash server, letting attackers eavesdrop on sensitive data, exploit requires network access to Logstash server.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2017-06-27 — PublishedP2026-10-21 — Tracked by OnyxT2026-10-21 — Public PoC: http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.htmlXscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 2.5%2026-09-23: epss 2.5%2026-09-24: epss 2.5%2026-09-25: epss 2.5%2026-09-26: epss 2.5%2026-09-27: epss 2.5%2026-09-28: epss 2.5%2026-09-29: epss 2.5%2026-09-30: epss 2.5%2026-10-01: epss 2.5%2026-10-02: epss 2.5%2026-10-03: epss 2.5%2026-10-04: epss 2.5%2026-10-05: epss 2.5%2026-10-06: epss 2.5%2026-10-07: epss 2.5%2026-10-08: epss 2.5%2026-10-09: epss 2.5%2026-10-10: epss 2.5%2026-10-11: epss 2.5%2026-10-12: epss 2.5%2026-10-13: epss 2.5%2026-10-14: epss 2.5%2026-10-15: epss 2.5%2026-10-16: epss 2.5%2026-10-18: epss 2.5%2026-10-19: epss 2.5%2026-10-20: epss 2.5%2026-10-21: epss 2.5%2.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx
  3. Public PoC http://packetstormsecurity.com/files/132800/Logstash-1.5.2-SSL-TLS-FREAK.html

Exploit availability

Weaknesses

CWE-200

References 5