by Kastro
Paper/Archive/CVE-2015-1427

CVE-2015-1427

Elastic Elasticsearch — Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

KEV · due 15 AprEPSS 100%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsecurityfocus.com/archive/1/534689/100/0/threadedrefpacketstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.htmladvisoryaccess.redhat.com/errata/RHSA-2017:0868refsecurityfocus.com/bid/72585refelasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-releasedrefexchange.xforce.ibmcloud.com/vulnerabilities/100850refpacketstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.htmlrefelastic.co/community/securityrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427kevcisa.gov/known-exploited-vulnerabilities-catalog