CVE-2017-8442CWE-402

CVE-2017-8442: fallo en Elasticsearch X-Pack Security

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Elasticsearch X-Pack Security

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

3Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackepss 0.9%
Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch _nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated Elasticsearch user to improperly view these details.
Productos afectados
Elastic · Elasticsearch X-Pack Security