What is CVE-2017-15044?

CVE-2017-15044 is a high-severity vulnerability in Docuware Fulltext Server. CVSS score: 8.8/10. Published 2017-11-21.

How severe is CVE-2017-15044?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Docuware Fulltext Server

CVE-2017-15044

The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr service, bypassing DocuWare's access control features of the DocuWare user interfaces and API. An attacker can also gain privileges by modifying text. The default installation is unsafe because the server listens on the network interface, not the localhost interface.

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Docuware Fulltext_server
N/a — versions n/a

References

cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-15044?: CVE-2017-15044 is a high-severity vulnerability in Docuware Fulltext Server. CVSS score: 8.8/10. Published 2017-11-21.
How severe is CVE-2017-15044?: High severity. CVSS v3 base score is 8.8 out of 10.