CVE-2017-8442

CVE-2017-8442 affects Elasticsearch X-Pack Security versions 5.0.0 to 5.4.3. When enabled, the Elasticsearch _nodes API can leak sensitive configuration information, including paths and passphrases of SSL keys used by an authentication realm, potentially exposing credentials to an authenticated u...