Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-W94P-6MHW-4QXW
HistoryMay 14, 2022 - 2:49 a.m.

Improper Access Control in Elasticsearch

2022-05-1402:49:44
CWE-284
GitHub Advisory Database
github.com
21

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.874 High

EPSS

Percentile

98.7%

JSON

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

Affected configurations

Vulners
Node
github_advisory_databaseorg.elasticsearch\Matchelasticsearch
OR
github_advisory_databaseorg.elasticsearch\Matchelasticsearch

Related

nessus 2
kitploit 2
n0where 1
checkpoint_advisories 1
attackerkb 1
metasploit 1
veracode 1
cve 1
canvas 1
packetstorm 2
myhack58 2
ubuntucve 1
cisa_kev 1
osv 1
zdt 2
openvas 1
securityvulns 2
nuclei 1
prion 1
cvelist 1
freebsd 1
threatpost 4
nvd 1
exploitdb 2
nmap 1
impervablog 2
talosblog 1
avleonov 1
redhat 1
nessus
nessus
Elasticsearch Groovy Script RCE
2015-03-13 00:00:00
FreeBSD : elasticsearch -- remote OS command execution via Groovy scripting engine (026759e0-1ba3-11e5-b43d-002590263bf5)
2015-06-26 00:00:00
kitploit
kitploit
Infection Monkey - An Automated Pentest Tool
2018-04-29 12:23:00
Infection Monkey v1.6 - An Automated Pentest Tool
2018-11-26 20:54:00
n0where
n0where
Data Center Security Testing Tool: Infection Monkey
2018-03-18 15:03:48
checkpoint_advisories
checkpoint_advisories
Elasticsearch Sandbox Escape Command Execution (CVE-2015-1427)
2015-10-19 00:00:00
attackerkb
attackerkb
CVE-2015-1427
2015-02-17 00:00:00
metasploit
metasploit
ElasticSearch Search Groovy Sandbox Bypass
2015-03-10 04:04:32
veracode
veracode
Arbitrary Shell Command Execution In The Groovy Scripting Engine
2015-02-18 17:22:02
cve
cve
CVE-2015-1427
2015-02-17 15:59:04
canvas
canvas
Immunity Canvas: ELASTICSEARCH_CVE_2015_1427
2015-02-17 15:59:00
packetstorm
packetstorm
ElasticSearch Unauthenticated Remote Code Execution
2015-03-12 00:00:00
ElasticSearch Search Groovy Sandbox Bypass
2015-03-12 00:00:00
myhack58
myhack58
Ann Day honey network capture“use of the ElasticSearch Groovy vulnerability Monroe coin(Dog)mining”event analysis-vulnerability warning-the black bar safety net
2019-06-26 00:00:00
Crypto currency mining machine using Elasticsearch vulnerability propagation-vulnerability warning-the black bar safety net
2018-12-14 00:00:00
ubuntucve
ubuntucve
CVE-2015-1427
2015-02-17 00:00:00
cisa_kev
cisa_kev
Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability
2022-03-25 00:00:00
osv
osv
Improper Access Control in Elasticsearch
2022-05-14 02:49:44
zdt
zdt
ElasticSearch Unauthenticated Remote Code Execution Exploit
2015-03-12 00:00:00
ElasticSearch Search Groovy Sandbox Bypass Exploit
2015-03-12 00:00:00
openvas
openvas
Elasticsearch Groovy Scripting Engine Unauthenticated Remote Code Execution
2015-03-12 00:00:00
securityvulns
securityvulns
Elasticsearch restrictions bypass
2015-02-22 00:00:00
Elasticsearch vulnerability CVE-2015-1427
2015-02-22 00:00:00
nuclei
nuclei
ElasticSearch - Remote Code Execution
2021-02-15 18:17:25
prion
prion
Design/Logic Flaw
2015-02-17 15:59:00
cvelist
cvelist
CVE-2015-1427
2015-02-17 15:00:00
freebsd
freebsd
elasticsearch -- remote OS command execution via Groovy scripting engine
2015-02-11 00:00:00
threatpost
threatpost
NFL Players and Agents Targeted in Database Extortion Attempt
2017-10-09 09:00:39
Elasticsearch Elastichoney Honeypot Shows 8,000 RCE Attacks
2015-05-11 13:18:29
Windows, Linux Devices Hijacked In Two-Year Cryptojacking Campaign
2021-02-17 21:39:10
nvd
nvd
CVE-2015-1427
2015-02-17 15:59:04
exploitdb
exploitdb
ElasticSearch - Remote Code Execution
2015-03-11 00:00:00
ElasticSearch - Search Groovy Sandbox Bypass (Metasploit)
2015-03-16 00:00:00
nmap
nmap
http-vuln-cve2015-1427 NSE Script
2015-05-21 10:02:56
impervablog
impervablog
Attackers exploit CVE-2021-26084 for XMRig crypto mining on affected Confluence servers
2021-09-13 14:57:52
Imperva Protects from New Spring Framework Zero-Day Vulnerabilities
2022-03-31 15:20:03
talosblog
talosblog
Cisco Talos Honeypot Analysis Reveals Rise in Attacks on Elasticsearch Clusters
2019-02-26 10:56:00
avleonov
avleonov
Vulnerability Management at Tinkoff Fintech School
2019-03-04 10:38:31
redhat
redhat
(RHSA-2017:0868) Important: Red Hat JBoss Fuse/A-MQ 6.3 R2 security and bug fix update
2017-04-03 21:01:34

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.874 High

EPSS

Percentile

98.7%

JSON
Related for GHSA-W94P-6MHW-4QXW
nessus2kitploit2n0where1checkpoint_advisories1attackerkb1metasploit1veracode1cve1canvas1packetstorm2myhack582ubuntucve1cisa_kev1osv1zdt2openvas1securityvulns2nuclei1prion1cvelist1freebsd1threatpost4nvd1exploitdb2nmap1impervablog2talosblog1avleonov1redhat1