CVE-2017-8446

2017-08-1820:29:00

CWE-269

CWE-522

web.nvd.nist.gov

cve-2017-8446

reporting feature

x-pack

impersonation vulnerability

security

nvd

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

CPENameOperatorVersion
elasticsearch:x\-packelasticsearch x-packle5.5.1
elasticsearch:x\-pack_reportingelasticsearch x-pack reportingle2.4.5

CPE	Name	Operator	Version
elasticsearch:x\-pack	elasticsearch x-pack	le	5.5.1
elasticsearch:x\-pack_reporting	elasticsearch x-pack reporting	le	2.4.5

References

www.elastic.co/community/security