PT-2015-6160
CVE-2015-3337
·
Published
2015-04-29
·
Updated
2026-10-15
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Elasticsearch versions prior to 1.4.5
Elasticsearch versions 1.5.x prior to 1.5.2
Description
A directory traversal issue allows remote attackers to read arbitrary files when a site plugin is enabled.
Recommendations
For Elasticsearch versions prior to 1.4.5, update to version 1.4.5 or later.
For Elasticsearch versions 1.5.x prior to 1.5.2, update to version 1.5.2 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾