Improper certificate validation in Elastic X-Pack Security
Priority LOW 24CWE-295Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-295.
Summary
An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. If reloading the trust material fails the trust manager will be replaced with an instance that trusts all certificates. This could allow any node using any certificate to join a cluster. The proper behavior in this instance is for the TLS trust manager to deny all certificates.
Why it matters now
EPSS 0.0016 5th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-8445
- 2026-10-03 Alias added: GHSA-fx8w-2fv7-5cq2
References
More Elastic X-pack vulnerabilities
- TI-2018-02792 Improper authentication in Elastic X-Pack Security CVSS 3.1CRITICAL 9.8
- TI-2017-05988 Improper access control in Elastic X-Pack Alerting CVSS 3.0HIGH 8.8
- TI-2017-05978 Improper access control in Elastic X-Pack Security CVSS 3.0HIGH 8.8
- TI-2017-05990 Incorrect permission assignment in Elastic X-Pack Security CVSS 3.0HIGH 7.5
- TI-2017-05982 Information disclosure in Elasticsearch X-Pack Security CVSS 3.0MEDIUM 6.5
- TI-2017-05987 Improper access control in Elastic X-Pack Security CVSS 3.0MEDIUM 6.5
Sources
- CVE-2017-8445 · CVE Program
- CVE-2017-8445 · NVD
- FIRST EPSS
- GHSA-fx8w-2fv7-5cq2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences