This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Apache Solr fixes 1 critical and 1 high-severity vulnerability
Apache Solr versions 8.11.4 and 9.7.0 fix 2 vulnerabilities [1].
An unauthenticated remote attacker can bypass authentication using a specially crafted URL. Solr instances using PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable [2][3].
The vulnerability is present in products:
- Apache Solr; >=5.3.0, <8.11.4
- Apache Solr; >=9.0.0, <9.7.0
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
More information:
- CVE-2024-45216 at cve.org, NVD
- CWE-CWE-287: Improper Authentication at cwe.mitre.org
- CWE-CWE-863: Incorrect Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 16. 10. 2024.
An authenticated remote attacker can, due to improper checks when restoring configuration sets from a backup, upload code into the class loader and potentially execute it. The vulnerability affects deployments that are not secured using Authentication/Authorization [4][5].
The vulnerability is present in products:
- Apache Solr; >=6.6.0, <8.11.4
- Apache Solr; >=9.0.0, < 9.7.0
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2024-45217 at cve.org, NVD
- CWE-1188: Insecure Default Initialization of Resource at cwe.mitre.org
The vulnerability was publicly disclosed 16. 10. 2024.
Links
- [1] https://solr.apache.org/security.html
- [2] https://solr.apache.org/security.html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending
- [3] https://nvd.nist.gov/vuln/detail/CVE-2024-45216
- [4] https://solr.apache.org/security.html#cve-2024-45217-apache-solr-configsets-created-during-a-backup-restore-command-are-trusted-implicitly
- [5] https://nvd.nist.gov/vuln/detail/CVE-2024-45217
By CESNET, z.s.p.o. Michaela Ručková on 17. 10. 2024.