Improper Access Control in Elasticsearch
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-1427US | critical9.8OT critical | KEV | ||
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell comm… | ||||
02
references
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.htmlWEB
- http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.htmlWEB
- http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-releasedWEB
- https://access.redhat.com/errata/RHSA-2017:0868WEB
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100850WEB
- https://nvd.nist.gov/vuln/detail/CVE-2015-1427ADVISORY
- https://www.elastic.co/community/securityWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan