PT-2024-2360 · Apache · Apache Solr

Skay · Published 2024-02-09 · Updated 2024-03-06 · CVE-2023-50292

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apache Solr versions 8.10.0 through 8.11.2 Apache Solr versions 9.0.0 through 9.2.x

Description The issue is related to an Incorrect Permission Assignment for Critical Resource and Improper Control of Dynamically-Managed Code Resources vulnerability in Apache Solr. The Schema Designer feature was introduced to allow users to more easily configure and test new Schemas and configSets. However, when the feature was created, the "trust" (authentication) of these configSets was not considered, allowing configSets created by unauthenticated users to load external libraries when used in the Schema Designer. This could potentially lead to Remote Code Execution.

Recommendations For Apache Solr versions 8.10.0 through 8.11.2, upgrade to version 8.11.3. For Apache Solr versions 9.0.0 through 9.2.x, upgrade to version 9.3.0.

Fix

RCE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

BDU:2024-02308

BIT-SOLR-2023-50292

CVE-2023-50292

GHSA-4WXW-42WX-2WFX

Affected Products

Apache Solr

References · 24

• https://nvd.nist.gov/vuln/detail/CVE-2023-50292 · Security Note
• https://osv.dev/vulnerability/GHSA-4wxw-42wx-2wfx · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-50292 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-50292 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02308 · Security Note
• https://solr.apache.org/security.html#cve-2023-50298-apache-solr-can-expose-zookeeper-credentials-via-streaming-expressions · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-50292 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-50292 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-50292 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-50292 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-solr-2023-50292 · Vendor Advisory
• https://github.com/apache/lucene-solr/commit/6e9ed203b30958396bdfd41760d426b386646865 · Note
• https://github.com/apache/solr/commit/d07751cfaa8065bea8bd43f59e758e50d50c2419 · Note
• https://t.me/cvenotify/70857 · Telegram Post
• https://twitter.com/oss_security/status/1756040123270017441 · Twitter Post