CVE-2015-4152 in Logstash
Summary
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/01/2015
Disclosure
06/15/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75893 | Elasticsearch Logstash File Output Plugin path traversal | 22 | Not defined | Official fix | CVE-2015-4152 |