Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2015-1427

Quick assessment

Affected
n/a n/a
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Elasticsearch是荷兰Elasticsearch公司的一套基于Lucene构建的开源分布式RESTful搜索引擎，它主要用于云计算中，并支持通过HTTP使用JSON进行数据索引。 Elasticsearch 1.37及之前版本和1.4.3之前1.4.x版本的Groovy脚本引擎中存在安全漏洞。远程攻击者可借助特制的脚本利用该漏洞绕过沙箱保护机制，执行任意shell命令。

AI Predicted 9.8 Difficulty: Easy KEV EPSS 99.91% · P100
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-1427

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Elasticsearch Groovy Scripting Engine Sandbox 安全绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Elasticsearch是荷兰Elasticsearch公司的一套基于Lucene构建的开源分布式RESTful搜索引擎，它主要用于云计算中，并支持通过HTTP使用JSON进行数据索引。 Elasticsearch 1.37及之前版本和1.4.3之前1.4.x版本的Groovy脚本引擎中存在安全漏洞。远程攻击者可借助特制的脚本利用该漏洞绕过沙箱保护机制，执行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2015-1427

# POC Description Source Link Shenlong Link
1 Elasticsearch 1.4.0 < 1.4.2 Remote Code Execution exploit and vulnerable container https://github.com/t0kx/exploit-CVE-2015-1427 POC Details
2 cve-2015-1427 https://github.com/cved-sources/cve-2015-1427 POC Details
3 None https://github.com/cyberharsh/Groovy-scripting-engine-CVE-2015-1427 POC Details
4 None https://github.com/xpgdgit/CVE-2015-1427 POC Details
5 To test elasticsearch vulnerabillity on newer version of debian https://github.com/Sebikea/CVE-2015-1427-for-trixie POC Details
6 ElasticSearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script to the Groovy scripting engine. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1427.yaml POC Details
7 None https://github.com/Threekiii/Awesome-POC/blob/master/%E6%95%B0%E6%8D%AE%E5%BA%93%E6%BC%8F%E6%B4%9E/ElasticSearch%20Groovy%20%E6%B2%99%E7%9B%92%E7%BB%95%E8%BF%87%20&%20%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E%20CVE-2015-1427.md POC Details
8 None https://github.com/chaitin/xray-plugins/blob/main/poc/manual/elasticsearch-cve-2015-1427.yml POC Details
9 https://github.com/vulhub/vulhub/blob/master/elasticsearch/CVE-2015-1427/README.md POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-1427

请登录查看更多情报信息。

Vendor Advisories for CVE-2015-1427 (4)

Exploits & Public PoCs for CVE-2015-1427 (1)

Security Blog Posts for CVE-2015-1427 (1)

Other References for CVE-2015-1427 (1)

Same Patch Batch · n/a · 2015-02-17 · 13 CVEs total

CVE-2014-8757 LG On-Screen Phone 安全绕过漏洞
CVE-2014-9466 Open-Xchange AppSuite and Server 权限许可和访问控制漏洞
CVE-2015-0247 e2fsprogs libext2fs库基于堆的缓冲区溢出漏洞
CVE-2015-1494 WordPress FancyBox for WordPress插件跨站脚本漏洞
CVE-2015-1616 McAfee Data Loss Prevention Endpoint ePO扩展SQL注入漏洞
CVE-2015-1617 McAfee Data Loss Prevention Endpoint ePO扩展跨站脚本漏洞
CVE-2015-1618 McAfee Data Loss Prevention Endpoint ePO扩展信息泄露漏洞
CVE-2015-1619 McAfee Email Gateway Secure Web Mail Client用户界面跨站脚本漏洞
CVE-2015-1621 Drupal Webform prepopulate block模块跨站脚本漏洞
CVE-2014-6102 多款IBM产品权限许可和访问控制漏洞
CVE-2014-6194 多款IBM产品路径遍历漏洞
CVE-2014-8023 Cisco Adaptive Security Appliances 权限许可和访问控制漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2015-1427

No comments yet

Leave a comment