VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jul 7, 2017· Updated Jun 17, 2026

CVE-2017-8442

CVE-2017-8442

Description

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch _nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated Elasticsearch user to improperly view these details.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Elastic/X Pack
    cpe:2.3:a:elastic:x-pack:*:*:*:*:*:*:*:*
    Range: >=5.0.0,<=5.4.3
  • Elastic/Elasticsearch X-Pack Securityv5
    Range: 5.0.0 to 5.4.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.