CVE-2024-45216criticalexploração observadaCWE-287CWE-863

CVE-2024-45216: falha crítica em Apache Solr

Apache Solr: Authentication bypass possible using a fake URL Path ending

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Apache Solr+ Monitorar org.apache.solr:solr

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

100Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actcvss 9.8epss 93%
da publicação à arma47 dias
Publicada no NVD16 de out.
1ª PoC+47d
VulnCheck+380d
Improper Authentication vulnerability in Apache Solr. Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing. This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0. Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Apache Software Foundation · Apache Solr
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Apache Solr

No mesmo produto, das mais perigosas para as menos.

CVE-2021-27905—SSRF vulnerability with the Replication handlerEPSS 93.1%CVE-2023-50386HIGHApache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSetsEPSS 83.7%CVE-2019-0192—CVE-2019-0192EPSS 78.2%CVE-2023-50290MEDIUMApache Solr: Host environment variables are published via the Metrics APIEPSS 68.4%CVE-2024-52012MEDIUMApache Solr: Configset upload on Windows allows arbitrary path write-accessEPSS 47.1%CVE-2018-1308—CVE-2018-1308EPSS 20.8%