CVE-2017-8444 The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client...
MediumCVSS 5.9
EPSS 0.57%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| elasticsearch cloud enterprise | = 1.0.0 | No fix listed |
| elasticsearch cloud enterprise | = 1.0.1 | No fix listed |
| Elastic Cloud Enterprise | = 1.0.0 and 1.0.1 | No fix listed |
References
- discuss.elastic.co vendor-advisory