Lucene search
+L

6 matches found

Prion
Prion
•added 2017/11/21 1:29 p.m.•23 views

Design/Logic Flaw

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

6.5CVSS8.8AI score0.02096EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2017/11/21 1:29 p.m.•34 views

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

8.8CVSS8.9AI score0.02096EPSS
SaveExploits0References1
OSV
OSV
•added 2017/11/21 1:29 p.m.•24 views

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

8.8CVSS5.8AI score0.02096EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2017/11/21 1:00 p.m.•40 views

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

8.9AI score0.02096EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2017/11/21 12:00 a.m.•4 views

PT-2017-13831

Name of the Vulnerable Software and Affected Versions DocuWare Fulltext Search server versions through 6.11 Description The default installation of the server allows remote users to connect to and download searchable text from the embedded Solr service, bypassing access control features. An...

8.8CVSS0.02096EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/21 12:00 a.m.•8 views

CVE-2017-15044: Undefined Security Weakness

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by...

8.8CVSS7.8AI score0.02096EPSS
SaveExploits0References1
Rows per page
Query Builder