PT-2019-4193 · Apache · Apache Solr

Published

2019-11-18

·

Updated

2024-02-23

·

CVE-2019-12409

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache Solr versions 8.1.1 through 8.2.0
Description The issue is related to an insecure setting in the default solr.in.sh configuration file, which enables JMX monitoring without authentication on the RMI PORT (default port 18983). This could allow anyone with network access to the Solr nodes to access JMX and potentially upload malicious code for execution on the Solr server. The vulnerability may also be related to unrestricted file upload, which could enable a remote attacker to upload harmful files.
Recommendations For Apache Solr versions 8.1.1 and 8.2.0, consider disabling JMX monitoring or restricting access to the RMI PORT until a secure configuration can be applied. As a temporary workaround, restrict inbound traffic to the RMI PORT in your firewall to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

APACHESOLRCVE2019_12409
BDU:2019-04789
CVE-2019-12409
GHSA-2289-PQFQ-6WX7

Affected Products

Apache Solr