CVE-2017-8445CWE-295

CVE-2017-8445: falha em Elastic X-Pack Security

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Elastic X-Pack Security

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.2%
An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior in this instance is for the TLS trust manager to deny all certificates.
Produtos afetados
Elastic · Elastic X-Pack Security
CVEs relacionadas — Elastic X-Pack Security

No mesmo produto, das mais perigosas para as menos.

CVE-2016-10364—CVE-2016-10364EPSS 1.0%CVE-2017-8451—CVE-2017-8451EPSS 0.9%CVE-2017-8450—CVE-2017-8450EPSS 0.9%CVE-2017-8449—CVE-2017-8449EPSS 0.8%CVE-2017-8447—CVE-2017-8447EPSS 0.6%