TF 0241 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Elasticsearch domain endpoint is using outdated TLS policy.

Property Value
Language terraform
Severity high
Service elastic-search
Provider AWS
Vulnerability Type omission

Description

Using outdated TLS policies for Elasticsearch domain endpoints can expose traffic to weak cryptographic algorithms, making it easier for attackers to decrypt or tamper with data.

Impact

Outdated TLS policies increase the risk of man-in-the-middle attacks, data interception, and compromise of sensitive information.

Resolution

Use the most modern TLS/SSL policies available