VulnerabilityModified

CVE-2017-8444

If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.

MEDIUM 5.9EPSS 0.57%

Does this matter?

Lower severity and a low EPSS score (0.57%). Track it; it rarely justifies an emergency change on its own.

Description

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.

CVSS 3.0: 5.9 MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.57% probability · 46th percentile
CISA KEV: Not listed
Weakness: CWE-319
Affected: elasticsearch/cloud enterprise
Source: security@elastic.co

References

https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247Vendor Advisory
https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.