Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-40970

Опубликовано: 27 апр. 2026
Источник: redhat
CVSS3: 4.2
EPSS Низкий

Описание

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.

A flaw was found in Spring Boot. When configured to use an SSL (Secure Sockets Layer) bundle, the Elasticsearch auto-configuration component does not perform hostname verification when establishing a connection to the Elasticsearch server. An attacker on an adjacent network could exploit this by performing a man-in-the-middle attack. This could lead to the disclosure or modification of sensitive information exchanged between Spring Boot and the Elasticsearch server.

Меры по смягчению последствий

To mitigate the risk of man-in-the-middle attacks, ensure that network communication between Spring Boot applications and Elasticsearch servers is protected. This can be achieved by deploying these components on a trusted, isolated network segment or by implementing strict firewall rules to limit access to the Elasticsearch server only from authorized Spring Boot application instances.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat AMQ Broker 7spring-bootFix deferred
Red Hat AMQ Clientsspring-bootFix deferred
Red Hat build of Apache Camel for Spring Boot 4spring-bootFix deferred
Red Hat build of Apache Camel - HawtIO 4spring-bootFix deferred
Red Hat build of OptaPlanner 8spring-bootFix deferred
Red Hat Data Grid 8spring-bootFix deferred
Red Hat Enterprise Linux 8log4j:2/log4jFix deferred
Red Hat Enterprise Linux 9log4jOut of support scope
Red Hat Fuse 7spring-bootFix deferred
Red Hat JBoss Enterprise Application Platform 7spring-bootFix deferred

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-295
https://bugzilla.redhat.com/show_bug.cgi?id=2463297Spring Boot: Spring Boot: Missing hostname verification in Elasticsearch auto-configuration allows information disclosure

EPSS

Процентиль: 3%
0.00136
Низкий

4.2 Medium

CVSS3

Связанные уязвимости

CVSS3: 5
nvd
4 месяца назад

When configured to use an SSL bundle, Spring Boot's Elasticsearch auto-configuration does not perform hostname verification when connecting to the Elasticsearch server. Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.

CVSS3: 5
github
4 месяца назад

Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.

EPSS

Процентиль: 3%
0.00136
Низкий

4.2 Medium

CVSS3