CVE-2017-8444 - AskarLabs CVE Database

CVE-2017-8444

Vendor Elastic

Product Elastic Cloud Enterprise

Weakness CWE-319 · Cleartext transmission

Published September 28, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.

Key dates

02Disclosure timeline

September 28, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-8444 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/319.html