Classic Web Vulns Found in Google Search Appliance 7.4

Wed, 23 Mar 2016 00:00:00 +0000

Hi all,

I’ve recently found some sort of classic web vulnerabilities in the Google Search Appliance (GSA) and as they are now fixed [0][1][2], I’d like to share them with you.

First of all, some infrastructure details about the GSA itself. The GSA is used by companies to apply the Google search algorithms to their internal documents without publishing them to cloud providers. To accomplish this task, the GSA provides multiple interfaces including a search interface, an administrative interface and multiple interfaces to index the organization’s data.

GSA on Insinuator.net - Bold Statements

Classic Web Vulns Found in Google Search Appliance 7.4