CVE-2015-4152 in Elasticsearch Logstash
요약 (영어)
Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
예약하다
2015. 06. 01.
공개
2015. 06. 15.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 75893 | Elasticsearch Logstash File Output Plugin 디렉토리 순회 | 22 | 정의되지 않음 | 공식 수정 | CVE-2015-4152 |