CVE-2023-50290mediumCWE-200

CVE-2023-50290: fallo de gravedad media en Apache Solr

Apache Solr: Host environment variables are published via the Metrics API

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Apache Solr+ Monitorear org.apache.solr:solr-core

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

40Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendcvss 6.5epss 68%
Lo que declaran los fabricantes (VEX)

Declaraciones oficiales de los fabricantes en formato CSAF/VEX: si su producto está afectado, ya corregido o descartado — y por qué. Es afirmación del fabricante, no juicio de Vexday.

Red Hatdocumento VEX ↗
Corregido
1 producto
Red Hat Fuse 7.13.0
corrección ↗
No afectado
6 productos — porque el código vulnerable no está presente en el producto
Red Hat Integration Camel K 1 · Red Hat JBoss Data Virtualization 6 · Red Hat JBoss Enterprise Application Platform 6 · Red Hat JBoss Enterprise Application Platform 8 · Red Hat JBoss Fuse 6 · y otros 1
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess. The Solr Metrics API is protected by the "metrics-read" permission. Therefore, Solr Clouds with Authorization setup will only be vulnerable via users with the "metrics-read" permission. This issue affects Apache Solr: from 9.0.0 before 9.3.0. Users are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Apache Software Foundation · Apache Solr
CVEs relacionadas — Apache Solr

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-27905—SSRF vulnerability with the Replication handlerEPSS 93.1%CVE-2024-45216CRITICALApache Solr: Authentication bypass possible using a fake URL Path endingEPSS 92.7%CVE-2023-50386HIGHApache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSetsEPSS 83.7%CVE-2019-0192—CVE-2019-0192EPSS 78.2%CVE-2024-52012MEDIUMApache Solr: Configset upload on Windows allows arbitrary path write-accessEPSS 47.1%CVE-2018-1308—CVE-2018-1308EPSS 20.8%