VulnCheck KEV: CVE-2015-1427

🗓️ 09 Apr 2019 00:00:00Reported by VulnCheckType

vulncheck_kev🔗 console.vulncheck.com👁 15 Views

CVE-2015-1427 in Elasticsearch lets remote attackers bypass the Groovy sandbox and run arbitrary commands.

Reporter	Title	Published	Views	Family All 68
FreeBSD	elasticsearch -- remote OS command execution via Groovy scripting engine	11 Feb 201500:00	–	freebsd
zdt	ElasticSearch Unauthenticated Remote Code Execution Exploit	12 Mar 201500:00	–	zdt
zdt	ElasticSearch Search Groovy Sandbox Bypass Exploit	12 Mar 201500:00	–	zdt
GithubExploit	Exploit for CVE-2015-1427	8 Oct 202619:58	–	githubexploit
GithubExploit	Exploit for CVE-2015-1427	9 Jan 201720:08	–	githubexploit
GithubExploit	exploits	5 Mar 201511:15	–	githubexploit
GithubExploit	Exploit for CVE-2015-1427	17 Dec 202510:07	–	githubexploit
Gitee	Exploit for OS Command Injection in Gnu Bash	27 Jul 202504:29	–	gitee
Gitee	Exploit for Improper Access Control in Elasticsearch	6 Jul 202502:42	–	gitee
Gitee	Exploit for Improper Access Control in Elasticsearch	3 Jun 202110:56	–	gitee

Source	Link
console	www.console.vulncheck.com/cve/CVE-2015-1427
f5	www.f5.com/labs/articles/threat-intelligence/vulnerabilities-exploits-and-malware-driving-attack-campaigns-march-2019
fortinet	www.fortinet.com/blog/threat-research/closer-look-satan-ransomwares-propagation-technics
cyware	www.cyware.com/news/satan-ransomware-an-overview-of-the-ransomwares-variants-and-exploits-35acecd3
trendmicro	www.trendmicro.com/en_us/research/19/g/multistage-attack-delivers-billgates-setag-backdoor-can-turn-elasticsearch-databases-into-ddos-botnet-zombies.html
digital	www.digital.nhs.uk/cyber-alerts/2019/cc-3164
f5	www.f5.com/labs/articles/threat-intelligence/vulnerabilities--exploits--and-malware-driving-attack-campaigns-in-july-2019
web	www.web.archive.org/web/20220227045141/https://risksense.com/wp-content/uploads/2019/09/RiskSense-Spotlight-Report-Ransomware.pdf
f5	www.f5.com/labs/articles/threat-intelligence/vulnerabilities--exploits--and-malware-driving-attack-campaigns-in-december-2019
cisa	www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json

09 Apr 2019 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 27.5

CVSS 3.19.8

EPSS0.99906

SSVC

CVE 2015 1427 Elasticsearch vulnerability Groovy sandbox Sandbox bypass Remote attackers Arbitrary commands