CVE-2015-0969 SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.
MediumCVSS 5.0
EPSS 13.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| searchblox | <= 8.1 | No fix listed |
References
- VU#697316 third-party-advisory us-government-resource