EUVD-2017-6519

Malware in sbrugna...

Design/Logic Flaw

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

CVE-2017-15044

The CVE-2017-15044 issue concerns DocuWare Fulltext Search server (up to version 6.11). The embedded Solr service is reachable from the network due to the server listening on a network interface (not localhost), allowing remote users to connect, download searchable text, and potentially bypass Do...

CVE-2017-15044: Undefined Security Weakness

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

PT-2017-13831

Name of the Vulnerable Software and Affected Versions DocuWare Fulltext Search server versions through 6.11 Description The default installation of the server allows remote users to connect to and download searchable text from the embedded Solr service, bypassing access control features. An...