ElasticSearch Remote Code Execution (CVE-2014-3120)

時間 2019-12-05

標籤 elasticsearch remote code execution cve 欄目日誌分析简体版

原文原文鏈接

Elasticsearch is a powerful open source search and analytics engine. The vulnerability allows attackers read from or append to files on the system hosting ElasticSearch database, could lead to sensitive information disclosure or further attack. Not sured if your ES is vulnerable?html

在線檢測地址：http://tool.scanv.com/es.htmlapp

漏洞修復方案：在配置文件elasticsearch.yml裏設置script.disable_dynamic: trueelasticsearch

詳見：http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/modules-scripting.html#_disabling_dynamic_scriptside

相關標籤/搜索

execution

remote

code

elasticsearch+elasticsearch

每日一句

每一个你不满意的现在，都有一个你没有努力的曾经。