PT-2018-18391 · Apache · Apache Solr
Ishan Chattopadhyaya
+1
·
Publicado
2018-07-05
·
Atualizado
2019-03-29
·
CVE-2018-8026
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Apache Solr versions 6.0.0 through 6.6.4
Apache Solr versions 7.0.0 through 7.3.1
Description:
The issue relates to an XML external entity expansion (XXE) in Solr config files, such as
currency.xml, enumsConfig.xml, and TIKA parsecontext config file, which can be exploited to read arbitrary local files from the Solr server or the internal network using file/ftp/http protocols. The Xinclude functionality in these config files is also affected. The manipulated files can be uploaded as configsets using Solr's API.Recommendations:
For Apache Solr versions 6.0.0 through 6.6.4, update to a version outside of this range to mitigate the risk.
For Apache Solr versions 7.0.0 through 7.3.1, update to a version outside of this range to mitigate the risk.
As a temporary workaround, consider restricting access to the Solr API to minimize the risk of exploitation.
Avoid using the Xinclude functionality in Solr config files until the issue is resolved.
Exploit
Correção
XXE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Solr