CVE-2015-3337

Publication date 1 May 2015

Last updated 24 July 2024

Ubuntu priority

Description

Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

Status

Show unmaintained releases

Package	Ubuntu Release	Status
elasticsearch	15.04 vivid	Fixed 1.0.3+dfsg-5+deb8u1build0.15.04.1
	14.10 utopic	Not in release
	14.04 LTS trusty	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Other references

https://www.elastic.co/blog/elasticsearch-1-5-2-and-1-4-5-released
https://www.cve.org/CVERecord?id=CVE-2015-3337

CVE-2015-3337

Description

Status

References

Other references

Access our resources on patching vulnerabilities