Skip to content

CVE-2015-0969 SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.

MediumCVSS 5.0 EPSS 13.4%
Published
Updated
Exploit status
No public exploit known

Description

SearchBlox before 8.2 allows remote attackers to obtain sensitive information via a pretty=true action to the _cluster/health URI.

Affected products

ProductAffected versionsFixed in
searchblox <= 8.1 No fix listed

References

  • VU#697316 third-party-advisory us-government-resource