CVE-2017-12195

CVE-2017-12195 is a medium-severity authentication bypass flaw affecting all OpenShift Enterprise versions utilizing the OpenShift Elasticsearch plugin. An attacker, knowing a valid authentication name and if Elasticsearch is configured with an external route, can bypass token-based authentication to access limited Elasticsearch index data. The vulnerability has a CVSS score of 4.8, indicating network-based, high-complexity attacks with low impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.