https://bugzilla.redhat.com/show_bug.cgi?id=1244236
Bug ID: 1244236
Summary: CVE-2015-5377 elasticsearch: unspecified remote code
execution vulnerability
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: vkaigoro(a)redhat.com
CC: bkabrda(a)redhat.com, bkearney(a)redhat.com,
bobjensen(a)gmail.com, cbillett(a)redhat.com,
cpelland(a)redhat.com, cperry(a)redhat.com,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, katello-bugs(a)redhat.com,
kseifried(a)redhat.com, mmccune(a)redhat.com,
ohadlevy(a)redhat.com, pbrobinson(a)gmail.com,
tjay(a)redhat.com, tomckay(a)redhat.com, zbyszek(a)in.waw.pl
It was reported that Elasticsearch versions prior to 1.6.1 are vulnerable to an
unspecified attack, leading to remote code execution.
Upstream fix is not known at the time of writing.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=JKu9hWgakf&a=cc_unsubscribe