Описание
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| elasticsearch | fixed | 1.6.1+dfsg-1 | package | |
| elasticsearch | end-of-life | jessie | package |
Примечания
https://www.elastic.co/blog/elasticsearch-1-7-0-and-1-6-1-released#security
EPSS
Связанные уязвимости
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
EPSS