Apache Solr 8.2.0 DataImportHandler Parameter improper authentication

Summaryinfo

A vulnerability has been found in Apache Solr 8.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the component DataImportHandler. This manipulation as part of Parameter causes improper authentication. This vulnerability is handled as CVE-2019-0193. The attack can be initiated remotely. Additionally, an exploit exists.

Detailsinfo

A vulnerability has been found in Apache Solr 8.2.0 and classified as critical. Affected by this vulnerability is an unknown part of the component DataImportHandler. The manipulation as part of a Parameter leads to a improper authentication vulnerability. The CWE definition for the vulnerability is CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

In Apache Solr, the DataImportHandler, an optional but popular module to pull in data from databases and other sources, has a feature in which the whole DIH configuration can come from a request's "dataConfig" parameter. The debug mode of the DIH admin screen uses this to allow convenient debugging / development of a DIH config. Since a DIH config can contain scripts, this parameter is a security risk. Starting with version 8.2.0 of Solr, use of this parameter requires setting the Java System property "enable.dih.dataConfigParam" to true.

The weakness was released 08/01/2019 (Website). The advisory is shared at issues.apache.org. This vulnerability is known as CVE-2019-0193 since 11/14/2018. The exploitation appears to be easy. The attack can be launched remotely. A single authentication is necessary for exploitation. Technical details are unknown but an exploit is available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 09/09/2024).

It is declared as attacked. The CISA Known Exploited Vulnerabilities Catalog lists this issue since 12/10/2021 with a due date of 06/10/2022:

Apply updates per vendor instructions.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Apache

Name

• Solr

Version

• 8.2.0

License

• open-source

Website

• Vendor: https://www.apache.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion