CVE-2017-8444 Weak cryptography in Elastic Cloud Enterprise
Attackers can intercept unencrypted traffic between client-forwarder and ZooKeeper to obtain sensitive data in Elastic Cloud Enterprise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-8444?
CVE-2017-8444 is a medium-severity vulnerability in Elastic Cloud Enterprise, published on 28 Sep 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.
Weakness: CWE-319
Which versions are affected by CVE-2017-8444?
It affects 1 product.
Products include Elasticsearch Cloud Enterprise.
How do I fix CVE-2017-8444?
No fix has been published for CVE-2017-8444 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-8444 being exploited?
There is no known exploitation of CVE-2017-8444 in the wild and no public exploit code.
Sources
Also known as GHSA-7p73-4949-hjv7.