Unspecified vulnerability in Elasticsearch X-Pack Security TLS trust manager

Elasticsearch X-Pack is an extension of Elastic Stack log analysis system from the Dutch company Elasticsearch.Security TLS trust manager is one of the security certificate managers. A security vulnerability exists in Elasticsearch X-Pack Security TLS trust manager versions 5.0.0 through 5.5.1. N...

Elasticsearch X-Pack and Reporting Plugin Information Disclosure Vulnerability

Elasticsearch X-Pack is a Dutch Elasticsearch company Elastic Stack log analysis system extension. reporting is a plug-in application in which it can also be used independently. A security vulnerability exists in the Reporting feature in Elasticsearch X-Pack versions prior to 5.5.2 and Reporting...

CVE-2017-8442: Transmission of Private Resources into a New Sphere

Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the Elasticsearch nodes API leaking sensitive configuration information, such as the paths and passphrases of SSL keys that were configured as part of an authentication realm. This could allow an authenticated...