Elasticsearch: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode mit den Rechten des Dienstes

Summary

Product

Vulnerabilities 1

• Critical 9.8
  CVE-2015-1427 Exploited Public exploit Scanner template EPSS 100%

  Improper Access Control in Elasticsearch

  The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

  org.elasticsearch:elasticsearch Maven
  Feb 17, 2015

  KEV Mar 25, 2022

Revision history

1. 2025-10-08 #5

   Neue Updates von Juniper aufgenommen

2. 2017-04-03 #4

   New remediations available

3. 2015-02-11 #1

   Initial Release

4. 2015-02-11 #2

   Version nicht vorhanden

5. 2015-02-11 #3

   Version nicht vorhanden

References

• Elasticsearch 1.4.3 and 1.3.8 released vom 2015-02-11
  http://www.elasticsearch.org/blog/elasticsearch-1-4-3-and-1-3-8-released/
• Exploit-DB #36337 vom 2015-03-11
  http://www.exploit-db.com/exploits/36337/
• Red Hat Security Advisory RHSA-2017:0868 vom 2017-04-04
  https://access.redhat.com/errata/RHSA-2017:0868
• Juniper Security Advisory JSA103138 vom 2024-10-08
  https://supportportal.juniper.net/s/article/2025-10-Security-Bulletin-Junos-Space-Security-Director-Multiple-vulnerabilities-resolved-in-24-1R4-by-upgrading-Log4j-Java-library-to-2-23-1-and-ElasticSearch-to-6-8-17