VDB-131446 · CVE-2019-0192 · Qualys 13434

Apache Solr up to 5.0.5/6.6.5 Config API HTTP POST Request deserialization

A vulnerability classified as critical was found in Apache Solr up to 5.0.5/6.6.5. This vulnerability affects an unknown function of the component Config API. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
8775680	05/14/2020	VulD...	confirm_url	https://security.netapp.com/advisory/ntap-20190327-0003/	security.netapp.com	05/14/2020	accepted	100
8775641	05/14/2020	VulD...	discoverydate	1551830400		05/14/2020	accepted	100
8775696	03/08/2019	VulD...	cvss3_nvd_basescore	9.8	nist.gov	03/08/2019	accepted	90
8775695	03/08/2019	VulD...	0day_days	1		03/08/2019	accepted	90
8775694	03/08/2019	VulD...	cvss3_vuldb_rc	X		03/08/2019	accepted	90
8775693	03/08/2019	VulD...	cvss3_vuldb_rl	X		03/08/2019	accepted	90
8775692	03/08/2019	VulD...	cvss3_vuldb_e	X		03/08/2019	accepted	90
8775691	03/08/2019	VulD...	cvss2_vuldb_rc	ND		03/08/2019	accepted	90
8775690	03/08/2019	VulD...	cvss2_vuldb_rl	ND		03/08/2019	accepted	90
8775689	03/08/2019	VulD...	cvss2_vuldb_e	ND		03/08/2019	accepted	90
8775688	03/08/2019	VulD...	location	Website		03/08/2019	accepted	90
8775687	03/08/2019	VulD...	seealso	131479 137901		03/08/2019	accepted	100
8775686	03/08/2019	VulD...	qualys_title	Apache Solr Remote Code Execution Vulnerability	qualys.com	03/08/2019	accepted	100
8775685	03/08/2019	VulD...	qualys_id	13434	qualys.com	03/08/2019	accepted	100
8775684	03/08/2019	VulD...	cve_nvd_summary	In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.	mitre.org	03/08/2019	accepted	100
8775683	03/08/2019	VulD...	cve_assigned	1542153600	mitre.org	03/08/2019	accepted	100
8775682	03/08/2019	VulD...	cve	CVE-2019-0192	mitre.org	03/08/2019	accepted	100
8775681	03/08/2019	VulD...	price_0day	$5k-$25k	see documentation	03/08/2019	accepted	100
8775679	03/08/2019	VulD...	url	http://mail-archives.us.apache.org/mod_mbox/www-announce/201903.mbox/%3CCAECwjAV1buZwg%2BMcV9EAQ19MeAWztPVJYD4zGK8kQdADFYij1w%40mail.gmail.com%3E	mail-archives.us.apache.org	03/08/2019	accepted	100
8775678	03/08/2019	VulD...	date	1551916800 (03/07/2019)		03/08/2019	accepted	100