Description

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

Remediation

References

http://packetstormsecurity.com/files/132721/Elasticsearch-Directory-Traversal.html

http://packetstormsecurity.com/files/133797/ElasticSearch-Path-Traversal-Arbitrary-File-Download.html

http://packetstormsecurity.com/files/133964/ElasticSearch-Snapshot-API-Directory-Traversal.html

http://www.securityfocus.com/archive/1/536017/100/0/threaded

http://www.securityfocus.com/bid/75935

https://www.elastic.co/community/security/

https://www.exploit-db.com/exploits/38383/

Related Vulnerabilities

CVE-2015-5326 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2017-1000395 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

CVE-2020-14445 Vulnerability in maven package org.wso2.carbon.identity.framework:org.wso2.carbon.policyeditor.ui

CVE-2023-43502 Vulnerability in maven package com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

CVE-2023-24831 Vulnerability in maven package org.apache.iotdb:iotdb-grafana-connector

Severity

Critical

Tags

Vendor Advisory CWE-22