CVE-2015-1427 Remote Code Execution in Elasticsearch

cve.mitre.org

3 pointssymkat1 comment

If you're running a vulnerable version, (especially world-accessible,) you should upgrade and firewall off ES as soon as possible.

I found about 10 different local privilege escalation exploits sitting in /tmp and a handful of reverse shells running this evening =(