medium5.0Public exploit code
CVE-2013-3597
servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SearchBlox - Multiple Information Disclosure Vulnerabilities2013-08-23 · webapps · java · Verified
Impact
servlet/CollectionListServlet in SearchBlox before 7.5 build 1 allows remote attackers to read usernames and passwords via a getList action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Searchblox | Searchblox | through 7.5 Versions 6.2, 6.3, 6.4, 7.0, 7.1 |