CVE-2015-1427
100Vexday Risk Score
Corrija agora. Ela está sob exploração confirmada pelo CISA e tem exploit funcional público.
ssvc Actcvss 9.8epss 100%
da publicação à arma22 dias
Publicada no NVD17 de fev.
1ª PoC+22d
metasploit11 de fev.
CISA KEV+2593d
probabilidade de exploração
100%top 1% das CVEs
exploração observada
simCISA + VulnCheck
11 exploit(s) público(s)
Ação exigida pela CISAprazo federal: 2022-04-15
Apply updates per vendor instructions.
Versões
Afetadas
maven/org.elasticsearch:elasticsearch <= 1.3.7; maven/org.elasticsearch:elasticsearch >= 1.4.0, <= 1.4.2
Corrigidas em
maven/org.elasticsearch:elasticsearch 1.3.8; maven/org.elasticsearch:elasticsearch 1.4.3
Pesquisado e redigido com IA a partir do advisory do fornecedor e de análises públicas, com as fontes acima. Confira sempre a versão corrigida no advisory oficial antes de agir.
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
n/a · n/aPoCs públicas encontradas — 11✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/36337exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/36415githubgithub.com/t0kx/exploit-CVE-2015-1427★ 32githubgithub.com/cved-sources/cve-2015-1427★ 0githubgithub.com/cyberharsh/Groovy-scripting-engine-CVE-2015-1427★ 0githubgithub.com/xpgdgit/CVE-2015-1427★ 0githubgithub.com/Sebikea/CVE-2015-1427-for-trixie★ 0vulncheckvulncheck.com/xdb/3dcf28bea839não verificadocve_referencepacketstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.htmlnão verificadovulncheckvulncheck.com/xdb/7c460955b63dnão verificadocve_referencepacketstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.htmlhttp://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.htmlhttps://access.redhat.com/errata/RHSA-2017:0868https://exchange.xforce.ibmcloud.com/vulnerabilities/100850https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427https://www.elastic.co/community/security/http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/http://www.securityfocus.com/archive/1/534689/100/0/threadedhttp://www.securityfocus.com/bid/72585