ElasticsearchGHSA-fh5x-4j57-6q5x
Improper Access Control in Elasticsearch
High7.5CVE-2015-4165 · Published May 14, 2022 · updated Feb 20, 2024
The snapshot API in Elasticsearch before 1.6.0 when another application exists on the system that can read Lucene files and execute code from them, is accessible by the attacker, and the Java VM on which Elasticsearch is running can write to a location that the other application can read and execute from, allows remote authenticated users to write to and create arbitrary snapshot metadata files, and potentially execute arbitrary code.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| org.elasticsearch:elasticsearch Maven | < 1.6.0 | 1.6.0 |
Details and references
- CVSS 3.0
- CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-284
- Also known as
- CVE-2015-4165
More Elasticsearch advisories
All Elasticsearch| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 142022 | Cross-site scripting in Elasticsearch MediumMay 14, 2022 | Medium | 1.4.0.Beta1 |
| May 142022 | Improper Access Control in ElasticsearchHighMay 14, 2022 | High | 1.3.8+1 more |
| May 142022 | Improper Limitation of a Pathname to a Restricted Directory in ElasticsearchMediumMay 14, 2022 | Medium | 1.6.1 |
| May 132022 | Improper Restriction of XML External Entity Reference in ElasticsearchMedium5.9May 13, 2022 | Medium5.9 | 6.5.2 |
| May 132022 | Exposure of Sensitive Information to an Unauthorized Actor in ElasticsearchMedium6.5May 13, 2022 | Medium6.5 | 6.4.3 |
| May 132022 | Elasticsearch subject to cross site scriptingMedium6.1May 13, 2022 | Medium6.1 | 5.6.9+1 more |