K34074377: BIG-IQ HA vulnerability CVE-2021-22997

Security Advisory Description BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. CVE-2021-22997 Impact BIG-IQ The vulnerability could result in a confidential...

CVE-2021-22997

The CVE-2021-22997 issue affects BIG-IQ High Availability (HA) with the ElasticSearch transport service. It lacks authentication and transmits ElasticSearch transport data unencrypted across 7.x/6.x (fixed in 8.0.0) and is rated High (CVSSv3 8.6). The Red Hat/Redacted and CNVD entries align on un...