Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-37731

Опубликовано: 15 дек. 2025
Источник: redhat
CVSS3: 7.4

Описание

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

A flaw was found in Elasticsearch. This vulnerability allows user impersonation via specially crafted client certificates signed by a legitimate, trusted Certificate Authority (CA).

Отчет

This vulnerability is rated Moderate for Red Hat because it allows user impersonation in Elasticsearch PKI realm. Exploitation requires a malicious actor to possess a specially crafted client certificate signed by a legitimate, trusted Certificate Authority. This impacts Elasticsearch deployments configured with PKI authentication.

Меры по смягчению последствий

To reduce the risk of exploitation, ensure that the Certificate Authority (CA) used for the Elasticsearch PKI realm is highly secured and has robust controls in place to prevent the signing of unauthorized client certificates. Additionally, restrict network access to the Elasticsearch instance to only trusted clients and networks, for example, by configuring firewall rules to limit inbound connections to the Elasticsearch port.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Logging Subsystem for Red Hat OpenShiftopenshift-logging/cluster-logging-operator-bundleAffected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/cluster-logging-rhel9-operatorAffected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/elasticsearch6-rhel9Affected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/elasticsearch-operator-bundleAffected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/elasticsearch-proxy-rhel9Affected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/elasticsearch-rhel9-operatorAffected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/eventrouter-rhel9Affected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/fluentd-rhel8Affected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/fluentd-rhel9Affected
Logging Subsystem for Red Hat OpenShiftopenshift-logging/kibana6-rhel8Affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-287
https://bugzilla.redhat.com/show_bug.cgi?id=2422248elasticsearch: Elasticsearch: User impersonation due to improper authentication in Public Key Infrastructure (PKI) realm

7.4 High

CVSS3

Связанные уязвимости

CVSS3: 6.8
ubuntu
4 месяца назад

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

CVSS3: 6.8
nvd
4 месяца назад

Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.

msrc
4 месяца назад

Elasticsearch Improper Authentication

CVSS3: 6.8
debian
4 месяца назад

Improper Authentication in Elasticsearch PKI realm can lead to user im ...

CVSS3: 6.8
github
4 месяца назад

Elasticsearch PKI Realm Authentication Bypass Vulnerability Allows User Impersonation Through Crafted Client Certificates

7.4 High

CVSS3