Published: 01/05/2015 Updated: 25/06/2015

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 436

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in Elasticsearch prior to 1.4.5 and 1.5.x prior to 1.5.2, when a site plugin is enabled, allows remote malicious users to read arbitrary files via unspecified vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
elasticsearch elasticsearch 1.5.0
elasticsearch elasticsearch 1.5.1
elasticsearch elasticsearch

John Heasman discovered that the site plugin handling of the Elasticsearch search engine was susceptible to directory traversal For the stable distribution (jessie), this problem has been fixed in version 103+dfsg-5+deb8u1 For the unstable distribution (sid), this problem will be fixed soon We recommend that you upgrade your elasticsearch pack ...

Directory traversal vulnerability in Elasticsearch before 145 and 15x before 152, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors ...

#!/usr/bin/python # Crappy PoC for CVE-2015-3337 - Reported by John Heasman of DocuSign # Affects all ElasticSearch versions prior to 152 and 145 # Pedro Andujar || twitter: pandujar || email: @segfaultes || @digitalsecnet # Tested on default Linux (deb) install /usr/share/elasticsearch/plugins/ # # Source: githubcom/pandujar/elasti ...

ElasticPwn is a proof of concept exploit that demonstrates the directory traversal vulnerability in versions prior to 152 and 145 ...

CVE-2015-3337 ElasticSearch 任意文件读取

CVE-2015-3337 CVE-2015-3337 任意文件读取 101020166:9200/_plugin/head//////////etc/passwd Usage: python CVE-2015-3337py python CVE-2015-3337py _____ _ _ _____ _____ _____ __ _____ _____ _____ _____ ______ / __ \ | | | ___| / __ \| _ |/ | | ___| |____ ||____ ||____ ||___ / | / \/ | | | |__ ______`'

ElasticSearch 目录穿越漏洞（CVE-2015-3337）测试环境 jre版本：openjdk:8-jre elasticsearch版本：v144 影响版本：145以下/152以下原理在安装了具有“site”功能的插件以后，插件目录使用/即可向上跳转，导致目录穿越漏洞，可读取任意文件。没有安装任意插件的elasticsearch不受影响。测试

CWE-22 http://www.securityfocus.com/archive/1/535385 https://www.elastic.co/community/security http://www.debian.org/security/2015/dsa-3241 http://packetstormsecurity.com/files/131646/Elasticsearch-Directory-Traversal.html http://www.securityfocus.com/bid/74353 https://www.exploit-db.com/exploits/37054/https://nvd.nist.gov https://www.debian.org/security/./dsa-3241 https://github.com/jas502n/CVE-2015-3337 https://www.exploit-db.com/exploits/37054/https://access.redhat.com/security/cve/cve-2015-3337

CVE-2015-3337

Vulnerability Summary

Vendor Advisories

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect