PT-2023-32990 · Ibexa · Ibexa Solr Search Engine

Published 2023-11-03 · Updated 2023-11-03

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Ibexa Solr search engine versions (affected versions not specified)

Description The issue is related to an error in Ibexa's Solr search engine, potentially exposing Solr credentials. This is a critical issue affecting all supported versions of the engine that use the Solr search engine.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

GHSA-7CRC-R3WG-CFGF

Affected Products

Ibexa Solr Search Engine

References · 4

• https://osv.dev/vulnerability/GHSA-7crc-r3wg-cfgf · Vendor Advisory
• https://github.com/ezsystems/ezplatform-solr-search-engine/commit/c382037208f38f18efb5a6b21d6936efc55fc408 · Note
• https://github.com/ezsystems/ezplatform-solr-search-engine · Note
• https://github.com/ezsystems/ezplatform-solr-search-engine/security/advisories/GHSA-7crc-r3wg-cfgf · Note