PT-2019-4193 · Apache · Apache Solr
CVE-2019-12409
·
Publicado
2019-11-18
·
Atualizado
2024-02-23
CVSS v3.1
10
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Apache Solr versions 8.1.1 through 8.2.0
Description
The issue is related to an insecure setting in the default solr.in.sh configuration file, which enables JMX monitoring without authentication on the RMI PORT (default port 18983). This could allow anyone with network access to the Solr nodes to access JMX and potentially upload malicious code for execution on the Solr server. The vulnerability may also be related to unrestricted file upload, which could enable a remote attacker to upload harmful files.
Recommendations
For Apache Solr versions 8.1.1 and 8.2.0, consider disabling JMX monitoring or restricting access to the RMI PORT until a secure configuration can be applied. As a temporary workaround, restrict inbound traffic to the RMI PORT in your firewall to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Unrestricted File Upload
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Apache Solr