CVE-2025-37731
Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.
Vendor
Product
CWE
Yayın Tarihi
2025-12-15 11:15:39
Güncelleme
2025-12-18 01:49:07
Source Identifier
security@elastic.co
KEV Date Added
-