CVE-2017-8444 | BDVDB-2026-91003 Detail

ElasticElastic Cloud Enterprise

Description#

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-319 Cleartext Transmission of Sensitive Information

References#

https://discuss.elastic.co/t/elastic-cloud-enterprise-1-0-2-security-update/100247

Exploit#

No public exploit known

History#

Version 12017-09-28Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.