VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Sep 29, 2017· Updated Jun 17, 2026

CVE-2017-8444

CVE-2017-8444

Description

The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the middle (MITM) the traffic between the client-forwarder and ZooKeeper they could potentially obtain sensitive data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Elastic/Cloud Enterprise3 versions
    cpe:2.3:a:elasticsearch:cloud_enterprise:1.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:elasticsearch:cloud_enterprise:1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:elasticsearch:cloud_enterprise:1.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 1.0.0 and 1.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.