CVE-2025-37731
Fixed in a distro release EPSS <1%CVSS 6.8
Improper Authentication in Elasticsearch PKI realm can lead to user impersonation via specially crafted client certificates. A malicious actor would need to have such a crafted client certificate signed by a legitimate, trusted Certificate Authority.
Products: Elasticsearch
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.elasticsearch.plugin:x-pack-core | 8.19.8 |
| Maven | org.elasticsearch.plugin:x-pack-core | 9.1.8 |
| Maven | org.elasticsearch.plugin:x-pack-core | 9.2.2 |
| Maven | org.elasticsearch.plugin:x-pack-security | 8.19.8 |
| Maven | org.elasticsearch.plugin:x-pack-security | 9.1.8 |
| Maven | org.elasticsearch.plugin:x-pack-security | 9.2.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | camunda-8.8 | 8.8.39-r1 |
| Chainguard | camunda-zeebe-8.6 | 8.6.39-r13 |
| Chainguard | camunda-zeebe-8.7 | 8.7.41-r1 |
| Chainguard | camunda-zeebe-8.8 | 8.8.39-r1 |
| Chainguard | commercial-elasticsearch-8.17 | 8.17.10-r2 |
| Chainguard | commercial-elasticsearch-8.17 | no fix |
| Chainguard | commercial-elasticsearch-8.18 | no fix |
| Chainguard | commercial-elasticsearch-9.0 | no fix |
| Chainguard | conductor | 3.31.0-r4 |
| Chainguard | conductor-fips | 3.31.0-r4 |
| Chainguard | elasticsearch-7 | no fix |
| Chainguard | elasticsearch-7-iamguarded | no fix |
| Chainguard | elasticsearch-8.17 | no fix |
| Chainguard | elasticsearch-8.18 | no fix |
| Chainguard | elasticsearch-8.18-iamguarded | no fix |
| Chainguard | elasticsearch-9.0 | no fix |
| Chainguard | elasticsearch-9.0-iamguarded | no fix |
| Chainguard | elasticsearch-fips-8.17 | 8.17.10-r14 |
| Chainguard | elasticsearch-fips-8.17-bitnami | 8.17.10-r7 |
| Chainguard | elasticsearch-fips-8.17-bitnami | 8.17.10-r14 |
| Chainguard | elasticsearch-fips-8.18 | 8.18.8-r7 |
| Chainguard | elasticsearch-fips-8.18-bitnami | 8.18.8-r7 |
| Chainguard | elasticsearch-fips-8.18-bitnami | 8.18.8-r5 |
| Chainguard | elasticsearch-fips-9.0 | no fix |
| Chainguard | elasticsearch-fips-9.0-bitnami | no fix |
| Chainguard | ranger | 2.9.0-r6 |
| Chainguard | ruby3.2-elasticsearch | 0 |
| Chainguard | ruby3.3-elasticsearch | 0 |
| Chainguard | ruby3.4-elasticsearch | 0 |
| Chainguard | ruby4.0-elasticsearch | 9.3.0-r0 |
| Chainguard | sonarqube | 25.12.0.117093-r1 |
| Chainguard | sonarqube-docker-compat | 25.12.0.117093-r1 |
| Chainguard | sonarqube-scripts | 25.12.0.117093-r1 |
| Ubuntu 16.04 LTS | elasticsearch | no fix |
| Wolfi | ruby3.2-elasticsearch | 0 |
| Wolfi | ruby3.3-elasticsearch | 0 |
| Wolfi | ruby3.4-elasticsearch | 0 |
| Wolfi | ruby4.0-elasticsearch | 9.3.0-r0 |
| Wolfi | sonarqube | 25.12.0.117093-r1 |
| Wolfi | sonarqube-docker-compat | 25.12.0.117093-r1 |
| Wolfi | sonarqube-scripts | 25.12.0.117093-r1 |