SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/697316 | Third Party Advisory US Government Resource |
Configurations
Information
Published : 2015-04-17 19:00
Updated : 2015-04-20 10:45
NVD link : CVE-2015-0969
Mitre link : CVE-2015-0969
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
searchblox
- searchblox