CVE-2017-8444CWE-319

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper

published September 28, 2017

CVSS
—
EPSS
1%
Percentile
46.6
In the wild
Unconfirmed
What it is

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00573 · 46.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2017-09-28T19:00Z
EPSS history
Timeline
  • 28 SEP 19:00Z
    The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper
    cvelistv5