Critical
Low
Medium
CVE-2025-35434
Overview
CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2.
Critical
Low
Medium
No items found.