Apache Solr 8.1.1/8.2.0 Configuration File solr.in.sh unrestricted upload

Summaryinfo

A vulnerability described as critical has been identified in Apache Solr 8.1.1/8.2.0. Impacted is an unknown function of the file solr.in.sh of the component Configuration File. The manipulation results in unrestricted upload. This vulnerability is known as CVE-2019-12409. It is possible to launch the attack remotely. No exploit is available. Applying restrictive firewalling is recommended.

Detailsinfo

A vulnerability, which was classified as critical, was found in Apache Solr 8.1.1/8.2.0. Affected is an unknown code block of the file solr.in.sh of the component Configuration File. The manipulation with an unknown input leads to a unrestricted upload vulnerability. CWE is classifying the issue as CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.

The weakness was published 11/18/2019 (Website). The advisory is shared for download at lists.apache.org. This vulnerability is traded as CVE-2019-12409 since 05/28/2019. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $5k-$25k (estimation calculated on 02/23/2024). The MITRE ATT&CK project declares the attack technique as T1608.002.

It is possible to mitigate the weakness by firewalling 18983.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Apache

Name

• Solr

Version

• 8.1.1
• 8.2.0

License

• open-source

Website

• Vendor: https://www.apache.org/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion