ElasticSearch Snapshot API Directory Traversal Vulnerability (CVE-2015-5531)
Publish date: 05 de octubre de 2016
Gravedad: Crítico
Descripción
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls.
Revelación de la información
Apply associated Trend Micro DPI Rules.
Soluciones
Trend Micro Deep Security DPI Rule Number: 1000128