cve/2015/CVE-2015-5377.md

CVE-2015-5377

Description

Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the transport protocol. NOTE: ZDI appears to claim that CVE-2015-3253 and CVE-2015-5377 are the same vulnerability

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cve-scores
• https://github.com/blackswanburst/afistfulofmetrics
• https://github.com/fi3ro/CVE-2015-5377
• https://github.com/fi3ro/elasticsearch_CVE-2015-5377
• https://github.com/marcocesarato/Shell-BotKiller