Veille CVE
CVE-2015-1427
9.8 Critique Exploitée activementCatalogue CISA KEV — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
Ajoutée le 25/03/2022 · Échéance de correction (agences US) : 15/04/2022
Action requise : Apply updates per vendor instructions.
Description
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 9.8 Critique | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 3.1 | 9.8 Critique | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | 7.5 Élevée | nvd@nist.gov (NVD) | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Références
- http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
- http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/ PatchVendor Advisory
- http://www.securityfocus.com/archive/1/534689/100/0/threaded Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/72585 Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:0868 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100850 Third Party AdvisoryVDB Entry
- https://www.elastic.co/community/security/ Not ApplicableVendor Advisory
- http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html Third Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
- http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/ PatchVendor Advisory
- http://www.securityfocus.com/archive/1/534689/100/0/threaded Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/72585 Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2017:0868 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100850 Third Party AdvisoryVDB Entry
- https://www.elastic.co/community/security/ Not ApplicableVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427 US Government Resource