Elasticsearch Groovy Scripting Engine Sandbox安全绕过漏洞

详细信息

漏洞类型

其他

漏洞描述

Elasticsearch是荷兰Elasticsearch公司的一套基于Lucene构建的开源分布式RESTful搜索引擎，它主要用于云计算中，并支持通过HTTP使用JSON进行数据索引。Elasticsearch 1.37及之前版本和1.4.3之前1.4.x版本的Groovy脚本引擎中存在安全漏洞。远程攻击者可借助特制的脚本利用该漏洞绕过沙箱保护机制，执行任意shell命令。

修复建议

升级至Elasticsearch的最新版本（1.3.8、1.4.3或更高版本），可从Elasticsearch网站获得： http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/

参考链接

• http://packetstormsecurity.com/files/130368/Elasticsearch-1.3.7-1.4.2-Sandbox-Escape-Command-Execution.html

  OSV · x_refsource_MISC

• http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released/

  NVD · x_refsource_CONFIRM

• https://exchange.xforce.ibmcloud.com/vulnerabilities/100850

  OSV · vdb-entry · x_refsource_XF

• http://packetstormsecurity.com/files/130784/ElasticSearch-Unauthenticated-Remote-Code-Execution.html

  OSV · x_refsource_MISC

• https://www.elastic.co/community/security/

  NVD · x_refsource_CONFIRM

• https://access.redhat.com/errata/RHSA-2017:0868

  OSV · vendor-advisory · x_refsource_REDHAT

• https://nvd.nist.gov/vuln/detail/CVE-2015-1427

  OSV

• https://github.com/advisories/GHSA-w94p-6mhw-4qxw
• https://www.elastic.co/community/security

  OSV · Vendor Advisory · Not Applicable

• http://www.elasticsearch.com/blog/elasticsearch-1-4-3-1-3-8-released

  OSV · Patch · Vendor Advisory

• https://osv.dev/vulnerability/GHSA-w94p-6mhw-4qxw

  OSV

• https://ubuntu.com/security/CVE-2015-1427

  OSV

• http://seclists.org/bugtraq/2015/Feb/92

  OSV

• https://www.cve.org/CVERecord?id=CVE-2015-1427

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  OSV

• https://osv.dev/vulnerability/UBUNTU-CVE-2015-1427

  OSV

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-1427

  NVD · US Government Resource