Cybersecurity Alerts

Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability

The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.

Required Action

Apply updates per vendor instructions.

Weakness Classification

CWE-284

References

• https://nvd.nist.gov/vuln/detail/CVE-2015-1427