CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5531

Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.842

EPSS Ranking 99.2%

CVSS Severity

CVSS v2 Score 5.0

References

Products affected by CVE-2015-5531

Elasticsearch » Elasticsearch » Version: 1.1.1

cpe:2.3:a:elasticsearch:elasticsearch:1.1.1
Elasticsearch » Elasticsearch » Version: 1.2.0

cpe:2.3:a:elasticsearch:elasticsearch:1.2.0
Elasticsearch » Elasticsearch » Version: 1.3.7

cpe:2.3:a:elasticsearch:elasticsearch:1.3.7
Elasticsearch » Elasticsearch » Version: 1.4.0

cpe:2.3:a:elasticsearch:elasticsearch:1.4.0
Elasticsearch » Elasticsearch » Version: 1.4.1

cpe:2.3:a:elasticsearch:elasticsearch:1.4.1
Elasticsearch » Elasticsearch » Version: 1.4.2

cpe:2.3:a:elasticsearch:elasticsearch:1.4.2
Elasticsearch » Elasticsearch » Version: 1.4.4

cpe:2.3:a:elasticsearch:elasticsearch:1.4.4
Elasticsearch » Elasticsearch » Version: 1.5.0

cpe:2.3:a:elasticsearch:elasticsearch:1.5.0
Elasticsearch » Elasticsearch » Version: 1.5.1

cpe:2.3:a:elasticsearch:elasticsearch:1.5.1
Elasticsearch » Elasticsearch » Version: 1.6.0

cpe:2.3:a:elasticsearch:elasticsearch:1.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5531

Products

Pricing

Contact Us