[Secure-testing-commits] r32167 - data/CVE

[Salvatore Bonaccorso]

Author: carnil
Date: 2015-02-11 21:31:21 +0000 (Wed, 11 Feb 2015)
New Revision: 32167

Modified:
   data/CVE/list
Log:
Add one issue in elasticsearch

Modified: data/CVE/list
===================================================================
--- data/CVE/list	2015-02-11 21:18:36 UTC (rev 32166)
+++ data/CVE/list	2015-02-11 21:31:21 UTC (rev 32167)
@@ -457,6 +457,10 @@
 	NOT-FOR-US: Sefrengo
 CVE-2015-1427
 	RESERVED
+	- elasticsearch <undetermined>
+	NOTE: http://seclists.org/bugtraq/2015/Feb/92
+	NOTE: Problem in the Groovy scripting engine.
+	TODO: check, possibly only 1.3.0-1.3.7 and 1.4.0-1.4.2
 CVE-2015-1426
 	RESERVED
 CVE-2015-1493 [MDL-48980 Security: Always clean the result  from min_get_slash_argument]