GitHub Advisoryadvisory · Maven

GHSA-2289-pqfq-6wx7 Unrestricted upload of file with dangerous type in Apache Solr

CRITICAL Published 2020-01-28 Modified 2021-08-19 Official page ↗
Aliases
CVE-2019-12409
Ecosystem
Maven
Packages
org.apache.solr:solr-core
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-434
Reviewed
2020-01-28

Affected packages

• Maven org.apache.solr:solr-core: >= 8.1.1, < 8.3.0 → fixed in 8.3.0

Description

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.

Related

Alias · CVE (1)

  • CVE-2019-12409 The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default… vulnerability

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References