Elasticsearch Improper Access Control vulnerability
The default configuration in Elasticsearch before 1.4.0.Beta1 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security policy if the user does not run Elasticsearch in its own independent virtual machine.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2014-3120US | high8.1OT kritisch | KEV | ||
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source pa… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://bouk.co/blog/elasticsearch-rceWEB
- http://www.exploit-db.com/exploits/33370WEB
- http://www.rapid7.com/db/modules/exploit/multi/elasticsearch/script_mvel_rceWEB
- https://github.com/elastic/elasticsearchPACKAGE
- https://github.com/elastic/elasticsearch/commit/bd0eb32d9c3c3f5b6e5f8630c859cd04bdcd4e06WEB
- https://github.com/elastic/elasticsearch/commit/f9de8b65898509e038e33215db0720b508477a12WEB
- https://github.com/elastic/elasticsearch/issues/7151WEB
- https://github.com/elastic/elasticsearch/pull/7642WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan