Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2017-8445 | First vendor Publication | 2017-08-18 |
Vendor | Cve | Last vendor Modification | 2019-10-09 |
Security-Database Scoring CVSS v3
Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N | |||
---|---|---|---|
Overall CVSS Score | 5.5 | ||
Base Score | 5.5 | Environmental Score | 5.5 |
impact SubScore | 3.6 | Temporal Score | 5.5 |
Exploitabality Sub Score | 1.8 | ||
Attack Vector | Local | Attack Complexity | Low |
Privileges Required | Low | User Interaction | None |
Scope | Unchanged | Confidentiality Impact | None |
Integrity Impact | High | Availability Impact | None |
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:N) | |||
---|---|---|---|
Cvss Base Score | 2.1 | Attack Range | Local |
Cvss Impact Score | 2.9 | Attack Complexity | Low |
Cvss Expoit Score | 3.9 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior in this instance is for the TLS trust manager to deny all certificates. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8445 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-295 | Certificate Issues |
CPE : Common Platform Enumeration
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2018-08-22 | Name : The remote web server hosts a Java application that is affected by an unautho... File : elasticsearch_esa_2017_15.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Source | Url |
---|---|
CONFIRM | https://www.elastic.co/community/security |
Alert History
Date | Informations |
---|---|
2021-05-04 13:05:40 |
|
2021-04-22 02:19:12 |
|
2020-05-23 02:09:00 |
|
2020-05-23 01:04:27 |
|
2019-10-10 05:20:07 |
|
2019-06-20 12:09:14 |
|
2019-06-19 12:09:25 |
|
2017-08-30 00:23:34 |
|
2017-08-19 05:23:08 |
|