PT-2019-4258 · Apache+1 · Apache Solr+1
Michael Stepankin
·
Publicado
2019-08-01
·
Atualizado
2025-10-27
·
CVE-2019-0193
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apache Solr versions prior to 8.2.0
Description
The DataImportHandler module in Apache Solr has a feature that allows the whole DIH configuration to come from a request's
dataConfig parameter. This parameter is a security risk since a DIH config can contain scripts. The debug mode of the DIH admin screen uses this feature, allowing convenient debugging and development of a DIH config. Exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.Recommendations
For versions prior to 8.2.0, consider disabling the use of the
dataConfig parameter until a patch is available. As a temporary workaround, restrict access to the DataImportHandler module to minimize the risk of exploitation. Starting with version 8.2.0, use of the dataConfig parameter requires setting the Java System property enable.dih.dataConfigParam to true, which should be done with caution and only when necessary.Exploit
Correção
Code Injection
Improper Authentication
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Apache Solr
Ubuntu