Unspecified vulnerability in Elasticsearch X-Pack Security TLS trust manager

Elasticsearch X-Pack is an extension of Elastic Stack log analysis system from the Dutch company Elasticsearch.Security TLS trust manager is one of the security certificate managers. A security vulnerability exists in Elasticsearch X-Pack Security TLS trust manager versions 5.0.0 through 5.5.1. N...

Elasticsearch X-Pack and Reporting Plugin Information Disclosure Vulnerability

Elasticsearch X-Pack is a Dutch Elasticsearch company Elastic Stack log analysis system extension. reporting is a plug-in application in which it can also be used independently. A security vulnerability exists in the Reporting feature in Elasticsearch X-Pack versions prior to 5.5.2 and Reporting...

PT-2017-18337

Name of the Vulnerable Software and Affected Versions Elasticsearch X-Pack versions 5.0.0 through 5.5.1 Description An error in the X-Pack Security TLS trust manager could allow any node using any certificate to join a cluster if reloading the trust material fails. The trust manager will be...

CVE-2017-8442: Transmission of Private Resources into a New Sphere

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...

PT-2017-18334

Name of the Vulnerable Software and Affected Versions Elasticsearch X-Pack Security versions 5.0.0 through 5.4.3 Description The issue allows an authenticated Elasticsearch user to improperly view sensitive configuration information, including the paths and passphrases of SSL keys configured as...

PT-2017-18342

Name of the Vulnerable Software and Affected Versions Elasticsearch X-Pack version 5.1.1 Description The issue concerns improper application of document and field level security to multi-search and multi-get requests. This could allow users without access to a document and/or field to access this...