Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2025-37731

Опубликовано: 16 дек. 2025
Источник: msrc
CVSS3: 6.8
EPSS Низкий

Описание

Elasticsearch Improper Authentication

EPSS

Процентиль: 9%
0.00033
Низкий

6.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.8
ubuntu
около 2 месяцев назад

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

CVSS3: 6.8
nvd
около 2 месяцев назад

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

CVSS3: 6.8
debian
около 2 месяцев назад

Improper Authentication in Elasticsearch PKI realm can lead to user im ...

CVSS3: 6.8
github
около 2 месяцев назад

Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates

EPSS

Процентиль: 9%
0.00033
Низкий

6.8 Medium

CVSS3