CVE-2013-3597

servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action...

CVE-2013-3597

SearchBlox is affected by CVE-2013-3597 in the servlet/CollectionListServlet prior to version 7.5 build 1. An unauthenticated remote attacker can read usernames and passwords via the getList action, compromising confidentiality. The issue is part of multiple vulnerabilities in version 7.4 and ear...

PT-2013-4503

Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 7.5 build 1 Description The issue allows remote attackers to read usernames and passwords. This is achieved through the servlet/CollectionListServlet via a getList action. Recommendations For versions prior to 7.5...

CVE-2013-3597: Exposure of Sensitive Information to an Unauthorized Actor

servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action...