GitHub Advisoryadvisory · Maven

GHSA-f553-j2gv-g5r9 Apache Solr Kerberos delegation token functionality flaws

HIGH Published 2022-05-14 Modified 2022-11-08 Official page ↗
Aliases
CVE-2017-9803
Ecosystem
Maven
Packages
org.apache.solr:solr-core
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Reviewed
2022-11-08

Affected packages

• Maven org.apache.solr:solr-core: >= 6.2.0, < 6.6.1 → fixed in 6.6.1

Description

Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider). Firstly, access to the security configuration can be leaked to users other than the solr super user. Secondly, malicious users can exploit this leaked configuration for privilege escalation to further expose/modify private data and/or disrupt operations in the Solr cluster. The vulnerability is fixed from Apache Solr 6.6.1 onwards.

Related

Alias · CVE (1)

  • CVE-2017-9803 Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References