Apache Solr up to 8.11.3/9.6.x ConfigSets insecure default initialization of resource

Summaryinfo

A vulnerability marked as problematic has been reported in Apache Solr up to 8.11.3/9.6.x. Affected is an unknown function of the component ConfigSets Handler. This manipulation causes an unknown weakness. This vulnerability appears as CVE-2024-45217. There is no available exploit. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Apache Solr up to 8.11.3/9.6.x and classified as problematic. Affected by this vulnerability is an unknown code of the component ConfigSets Handler. The CWE definition for the vulnerability is CWE-1188. The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure. The impact remains unknown. The summary by CVE is:

Insecure Default Initialization of Resource vulnerability in Apache Solr. New ConfigSets that are created via a Restore command, which copy a configSet from the backup and give it a new name, are created without setting the "trusted" metadata. ConfigSets that do not contain the flag are trusted implicitly if the metadata is missing, therefore this leads to "trusted" ConfigSets that may not have been created with an Authenticated request. "trusted" ConfigSets are able to load custom code into classloaders, therefore the flag is supposed to only be set when the request that uploads the ConfigSet is Authenticated & Authorized. This issue affects Apache Solr: from 6.6.0 before 8.11.4, from 9.0.0 before 9.7.0. This issue does not affect Solr instances that are secured via Authentication/Authorization. Users are primarily recommended to use Authentication and Authorization when running Solr. However, upgrading to version 9.7.0, or 8.11.4 will mitigate this issue otherwise.

It is possible to read the advisory at lists.apache.org. This vulnerability is known as CVE-2024-45217 since 08/23/2024. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 8.11.4 or 9.7.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at CERT Bund (WID-SEC-2024-3186). Be aware that VulDB is the high quality source for vulnerability data.

Affected

• IBM Operational Decision Manager
• Apache Solr
• IBM Cognos Analytics

Productinfo

Vendor

• Apache

Name

• Solr

Version

• 8.11.0
• 8.11.1
• 8.11.2
• 8.11.3
• 9.0
• 9.1
• 9.2
• 9.3
• 9.4
• 9.5
• 9.6

License

• open-source

Website

• Vendor: https://www.apache.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion