CVE-2023-50290mediumCWE-200

CVE-2023-50290: falha de média gravidade em Apache Solr

Apache Solr: Host environment variables are published via the Metrics API

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Solr+ Monitorar org.apache.solr:solr-core

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

40Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 6.5epss 68%
O que os fabricantes declaram (VEX)

Declarações oficiais dos fabricantes em formato CSAF/VEX: se o produto deles está afetado, já corrigido ou descartado — e por quê. É afirmação do fabricante, não juízo do Vexday.

Red Hatdocumento VEX ↗
Corrigido
1 produto
Red Hat Fuse 7.13.0
correção ↗
Não afetado
6 produtos — porque o código vulnerável não está presente no produto
Red Hat Integration Camel K 1 · Red Hat JBoss Data Virtualization 6 · Red Hat JBoss Enterprise Application Platform 6 · Red Hat JBoss Enterprise Application Platform 8 · Red Hat JBoss Fuse 6 · e outros 1
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Solr. The Solr Metrics API publishes all unprotected environment variables available to each Apache Solr instance. Users are able to specify which environment variables to hide, however, the default list is designed to work for known secret Java system properties. Environment variables cannot be strictly defined in Solr, like Java system properties can be, and may be set for the entire host, unlike Java system properties which are set per-Java-proccess. The Solr Metrics API is protected by the "metrics-read" permission. Therefore, Solr Clouds with Authorization setup will only be vulnerable via users with the "metrics-read" permission. This issue affects Apache Solr: from 9.0.0 before 9.3.0. Users are recommended to upgrade to version 9.3.0 or later, in which environment variables are not published via the Metrics API.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Apache Software Foundation · Apache Solr
CVEs relacionadas — Apache Solr

No mesmo produto, das mais perigosas para as menos.

CVE-2021-27905—SSRF vulnerability with the Replication handlerEPSS 93.1%CVE-2024-45216CRITICALApache Solr: Authentication bypass possible using a fake URL Path endingEPSS 92.7%CVE-2023-50386HIGHApache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSetsEPSS 83.7%CVE-2019-0192—CVE-2019-0192EPSS 78.2%CVE-2024-52012MEDIUMApache Solr: Configset upload on Windows allows arbitrary path write-accessEPSS 47.1%CVE-2018-1308—CVE-2018-1308EPSS 20.8%