Non notée
CVE-2017-8444 The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper
Description
The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Elastic Cloud Enterprise | Versions non publiées |
Références
- discuss.elastic.co discuss.elastic.co
Chronologie
- Publiée
- Dernière modification
Autres CVE de Elastic Cloud Enterprise
Les 13 CVE de Elastic Cloud Enterprise →
CVE-2026-115713
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
7.5
Élevée
CVE-2026-115712
Incorrect Authorization (CWE-863) in Elastic Cloud Enterprise (ECE) can lead to unauthorized modification of…
4.3
Moyenne
CVE-2026-115711
Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…
6.4
Moyenne
CVE-2026-115709
Improper Link Resolution Before File Access ('Link Following') (CWE-59) in Elastic Cloud Enterprise (ECE) can lead to…
8.2
Élevée