CVE-2014-3120—Elasticsearch Remote Code Execution Vulnerability

漏洞名称

Elasticsearch Remote Code Execution Vulnerability

描述

Elasticsearch enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2014-3120

相关 CWE

• CWE-284