CVE-2018-11802
Incorrect Authorization in Apache Solr
Also known as GHSA-j346-h5wc-rw2m
Published 6 y ago · modified 4 mo ago · JSON
Summary
In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all authorization settings for such requests. This affects all Solr versions prior to 7.7 that use the default authorization mechanism of Solr (RuleBasedAuthorizationPlugin).
Exploit prediction (EPSS)
2.02% probability of exploitation in the next 30 days, higher than 81% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:P/I:N/A:N |
| GitHub | 3.1 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.apache.solr:solr-parent | >=7.0.0, <7.7.0 <6.6.6 | 7.7.0 6.6.6 |
| maven | org.apache.solr:solr-core | >=7.0.0, <7.7.0 <6.6.6 | 7.7.0 6.6.6 |
Affected products
- Apache Apache Solr
Classification
- Weakness
- CWE-863 Incorrect Authorization
References
- openwall.com /lists/oss-security/2019/04/24/1 · x_refsource_MISC, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2018-11802 · advisory
- github.com /apache/lucene-solr/commit/add003f217806afb4e1604f697cdb0a5a7115895 · web
- github.com /apache/lucene-solr · package
- issues.apache.org /jira/browse/SOLR-12514 · web
Sources
- CVE List: CVE-2018-11802
- GitHub Advisory: GHSA-j346-h5wc-rw2m
- NVD: CVE-2018-11802
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.