CVE-2021-22997
Assigner: f5
Published: 2021-03-31T17:35:54
State: PUBLISHED
affected: product: BIG-IQ
vendor: n/a
versions: status: affected
version: All 7.x and 6.x versions
descriptions: value: On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated.
problemTypes: descriptions: description: information disclosure
type: text