CVE-2025-35434

Vulnerability Description

CISA Thorium does not validate TLS certificates when connecting to Elasticsearch. An unauthenticated attacker with access to a Thorium cluster could impersonate the Elasticsearch service. Fixed in 1.1.2.

Vulnerability Details

Published Date

September 17, 2025

Last Modified

September 23, 2025

Source

NVD

CVE-2025-35434

Vulnerability Description

Vulnerability Details

Discussion (0)

Add Comment