SearchBlox Information Disclosure Vulnerability

SearchBlox is an enterprise search solution , built on Lucene . SearchBlox has a security vulnerability that allows an attacker to obtain sensitive information by submitting a special cluster/health URI that contains a pretty=true action...

PT-2015-4995

Name of the Vulnerable Software and Affected Versions SearchBlox versions prior to 8.2 Description The issue allows remote attackers to obtain sensitive information. This can be achieved by sending a "pretty=true" action to the " cluster/health" API endpoint. Recommendations For versions prior to...