CVE-2025-35434
CISA Thorium does not validate TLS connections to Elasticsearch
Résumé
CISA Thorium does not validate TLS connections to Elasticsearch
Description d'origine
La description telle que publiée par la source (souvent en anglais).
CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2.
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com
- web raw.githubusercontent.com
- web cve.org