Description
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Elastic Logstash
Default version status: unaffected
8.0.0 to < 8.17.6affected8.18.0 to < 8.18.1affected9.0.0 to < 9.0.1affected