Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Elasticsearch Subscribe
Filtered by product Cloud Enterprise
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-8444 1 Elasticsearch 1 Cloud Enterprise 2019-10-09 4.3 MEDIUM 5.9 MEDIUM
The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.