Debian/sphinxsearch: high 7.5
Sphinx Technologies Sphinx 3.1.1 by default has no authentication and listens on 0.0.0.0, making it exposed to the internet (unless filtered by a firewall or reconfigured to listen to 127.0.0.1 only).
Action: Upgrade sphinxsearch to 2.2.11-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.11-4 | - |
Fixed versions
| 2.2.11-4 |
Sources
published · modified · JSON