Lucene search
MitreCVELIST:CVE-2014-3120HistoryJul 28, 2014 - 7:00 p.m.
CVE-2014-3120
2014-07-2819:00:00
mitre
www.cve.org
The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor’s intended security policy if the user does not run Elasticsearch in its own independent virtual machine.
References
bouk.co/blog/elasticsearch-rce/
www.exploit-db.com/exploits/33370
www.osvdb.org/106949
www.rapid7.com/db/modules/exploit/multi/elasticsearch/script_mvel_rce
www.securityfocus.com/bid/67731
www.elastic.co/blog/logstash-1-4-3-released
www.elastic.co/community/security/
www.found.no/foundation/elasticsearch-security/#staying-safe-while-developing-with-elasticsearch
Related
redhat
redhat
(RHSA-2014:1186) Important: katello-configure security update
2014-09-11 00:00:00
(RHSA-2014:1170) Important: Red Hat JBoss Fuse/A-MQ 6.1.0 security update
2014-09-10 05:27:38
zdt
zdt
ElasticSearch Dynamic Script Arbitrary Java Execution
2014-06-01 00:00:00
ElasticSearch Remote Code Execution Exploit
2014-05-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2019-01-15 09:01:00
Remote Code Execution (RCE)
2017-03-14 03:18:32
nvd
nvd
CVE-2014-3120
2014-07-28 19:55:04
exploitpack
exploitpack
ElasticSearch - Remote Code Execution
2014-05-15 00:00:00
cisa_kev
cisa_kev
Elasticsearch Remote Code Execution Vulnerability
2022-03-25 00:00:00
cve
cve
CVE-2014-3120
2014-07-28 19:55:04
openvas
openvas
Elastisearch Remote Code Execution Vulnerability
2014-05-22 00:00:00
nuclei
nuclei
ElasticSearch v1.1.1/1.2 RCE
2021-02-15 13:35:15
Cisco Unified Communications Manager 7/8/9 - Directory Traversal
2021-07-22 23:12:07
nessus
nessus
FreeBSD : elasticsearch and logstash -- remote OS command execution via dynamic scripting (43ac9d42-1b9a-11e5-b43d-002590263bf5)
2015-06-26 00:00:00
RHEL 6 : katello-configure (RHSA-2014:1186)
2014-09-12 00:00:00
Elasticsearch 'source' Parameter RCE
2014-07-17 00:00:00
attackerkb
attackerkb
CVE-2014-3120
2014-07-28 00:00:00
packetstorm
packetstorm
ElasticSearch Dynamic Script Arbitrary Java Execution
2014-05-30 00:00:00
Elastic Search 1.1.1 Arbitrary File Read
2014-07-30 00:00:00
freebsd
freebsd
checkpoint_advisories
checkpoint_advisories
ElasticSearch search Remote Code Execution (CVE-2014-3120)
2014-05-25 00:00:00
prion
prion
Default configuration
2014-07-28 19:55:00
exploitdb
exploitdb
ElasticSearch - Remote Code Execution
2014-05-15 00:00:00
myhack58
myhack58
threatpost
threatpost
Windows, Linux Devices Hijacked In Two-Year Cryptojacking Campaign
2021-02-17 21:39:10
Golang Worm Widens Scope to Windows, Adds Payload Capacity
2020-06-25 18:30:59
talosblog
talosblog