Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-8445
HistoryAug 18, 2017 - 8:29 p.m.

Design/Logic Flaw

2017-08-1820:29:00
PRIOn knowledge base
www.prio-n.com
4

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior in this instance is for the TLS trust manager to deny all certificates.

CPENameOperatorVersion
x-packge5.0.0
x-packle5.5.1

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Related for PRION:CVE-2017-8445