CVE-2025-37730 MEDIUM

CVE-2025-37730: Logstash Improper Certificate Validation in TCP output

Vendor Elastic
Product Logstash
Weakness CWE-295
Published May 6, 2025
Last update May 6, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client” mode, as hostname verification in TCP output was not being performed when the ssl_verification_mode => full was set.

Key dates

02Disclosure timeline

May 6, 2025 CVE published
May 6, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2019-0054 Junos OS: SRX Series: An attacker may be able to perform Man-in-the-Middle (MitM) attacks during app-id signature updates. CVE-2026-41132 CKAN: No certificate validation on STMP connection CVE-2026-1068 CVE-2017-13105 Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication CVE-2024-25141 Apache Airflow Mongo Provider: Certificate validation isn't respected even if SSL is enabled for apache-airflow-providers-mongo