CVE-2015-5377

🗓️ 06 Mar 2018 20:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 158 Views

Elasticsearch before 1.6.1 allows remote code execution via transport protocol (CVE-2015-5377)

Reporter	Title	Published	Views	Family All 21
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Elasticsearch might affect Process Federation Server in IBM Business Process Manager (BPM) - CVE-2015-5531, CVE-2015-5377	15 Jun 201807:03	–	ibm
0day.today	Apache Groovy Deserialization of Untrusted Data Remote Code Execution Exploit 0day	24 Jul 201500:00	–	zdt
GithubExploit	Exploit for Injection in Elastic Elasticsearch	28 Dec 202021:30	–	githubexploit
CNVD	Elasticsearch Remote Code Execution Vulnerability	22 Jul 201500:00	–	cnvd
Check Point Advisories	Elastic Elasticsearch ThrowableObjectInputStream Insecure Deserialization (CVE-2015-5377)	1 Oct 201700:00	–	checkpoint_advisories
Cvelist	CVE-2015-5377	6 Mar 201820:00	–	cvelist
Elastic	Elasticsearch remote code execution CVE-2015-5377	16 Jul 201517:30	–	elastic
Tenable Nessus	Elasticsearch ESA-2015-06	7 Dec 201800:00	–	nessus
Tenable Nessus	Elasticsearch Transport Protocol Unspecified Remote Code Execution	11 Jan 201800:00	–	nessus

NVD

Node

elastic elasticsearchRange<1.6.1

Source	Link
securityfocus	www.securityfocus.com/bid/75938
github	www.github.com/elastic/elasticsearch/commit/bf3052d14c874aead7da8855c5fcadf5428a43f2
discuss	www.discuss.elastic.co/t/elasticsearch-remote-code-execution-cve-2015-5377/25736
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-15-365/

21 Nov 2024 02:32Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 39.8

EPSS0.39895

elasticsearch remote code execution cve-2015-5377 vulnerability