CVE-2014-3120

CVE-2014-3120...

ElasticSearch-CVE-2014-3120

ElasticSearch search Remote Code Execution CVE-2014-3120 POC Code to exploit CVE-2014-3120 Requirements: python Usage: python elasticcheck.py Example: ➜ $ python elasticcheck.py hostport.txt 0 10.0.0.10:9200 Vulnerable 1 10.0.0.11:9201 Not Vulnerable 2 10.0.0.12:9201 Connection error Vulnerable...

es_inject

CVE-2014-3120 Elastic Search Remote Code Execution This project demonstrates the CVE-2014-3120 vulnerability/misconfiguration. It allows you to read from and append to files on the system hosting ES, provided the user running ES has access to them. Notes This does not require a web server. Save i...

org.elasticsearch:elasticsearch-attachments (0.6.0) potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.6.0)

org.elasticsearch:elasticsearch MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-attachments 0.6.0 Source cves: CVE-2014-3120 Source advisory:...

org.elasticsearch:elasticsearch-analysis-icu (0.7.0), org.elasticsearch:elasticsearch-client-groovy (0.7.0) +3 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.7.0)

org.elasticsearch:elasticsearch MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.8.0), org.elasticsearch:elasticsearch-client-groovy (0.8.0) +4 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.8.0)

org.elasticsearch:elasticsearch MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.8.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.9.0), org.elasticsearch:elasticsearch-client-groovy (0.9.0) +4 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.9.0)

org.elasticsearch:elasticsearch MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.9.0 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.12.0), org.elasticsearch:elasticsearch-cloud-aws (0.12.0) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.12.0)

org.elasticsearch:elasticsearch MAVEN version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.12.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.12.1), org.elasticsearch:elasticsearch-cloud-aws (0.12.1) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.12.1)

org.elasticsearch:elasticsearch MAVEN version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.12.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.13.0), org.elasticsearch:elasticsearch-cloud-aws (0.13.0) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.13.0)

org.elasticsearch:elasticsearch MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.13.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.13.1), org.elasticsearch:elasticsearch-cloud-aws (0.13.1) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.13.1)

org.elasticsearch:elasticsearch MAVEN version 0.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.13.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.0), org.elasticsearch:elasticsearch-cloud-aws (0.14.0) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.14.0)

org.elasticsearch:elasticsearch MAVEN version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.2), org.elasticsearch:elasticsearch-cloud-aws (0.14.2) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.14.2)

org.elasticsearch:elasticsearch MAVEN version 0.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.3), org.elasticsearch:elasticsearch-cloud-aws (0.14.3) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.14.3)

org.elasticsearch:elasticsearch MAVEN version 0.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.3 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.14.4), org.elasticsearch:elasticsearch-cloud-aws (0.14.4) +10 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.14.4)

org.elasticsearch:elasticsearch MAVEN version 0.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.14.4 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.15.0), org.elasticsearch:elasticsearch-cloud-aws (0.15.0) +11 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.15.0)

org.elasticsearch:elasticsearch MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.0 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.15.1), org.elasticsearch:elasticsearch-cloud-aws (0.15.1) +11 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.15.1)

org.elasticsearch:elasticsearch MAVEN version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.15.2), org.elasticsearch:elasticsearch-cloud-aws (0.15.2) +11 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.15.2)

org.elasticsearch:elasticsearch MAVEN version 0.15.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.15.2 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.16.1), org.elasticsearch:elasticsearch-cloud-aws (0.16.1) +11 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.16.1)

org.elasticsearch:elasticsearch MAVEN version 0.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.16.3), org.elasticsearch:elasticsearch-cloud-aws (0.16.3) +11 more potentially affected by CVE-2014-3120 via org.elasticsearch:elasticsearch (0.16.3)

org.elasticsearch:elasticsearch MAVEN version 0.16.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.16.3 - org.elasticsearch:elasticsearch-cloud-aws...