CVE-2015-5619 Elasticsearch Logstash Man in the Middle Security Bypass Vulnerability (ESA-2015-09)

ElasticSearch Logstash is an open source, server-side data processing pipeline that ingests data from a multitude of sources simultaneously, transforms it, and then sends it to your favorite 'stash'.

All Logstash versions prior to 1.5.3 that use Lumberjack output is vulnerable to this man in the middle attack. Please note that Logstash Forwarder is not affected by this.

Affected Versions:
ElasticSearch Logstash versions prior to 1.5.3 QID Detection Logic (Authenticated):
This QID checks for the installed Logstash package.

A remote attacker could exploit this vulnerability to obtain sensitive information via a man-in-the-middle attack.

Customers are advised to upgrade to the latest version of Logstash. Refer to Logstash Downloads for more information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

CVE-2015-5619 (Elasticsearch Logstash )