CVE-2025-35434
CISA Thorium does not validate TLS connections to Elasticsearch
概要
CISA Thorium does not validate TLS connections to Elasticsearch
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org