CVE-2021-29943
Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections
Summary
Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections
Original description
The description as published by the source.
When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
solr
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.8.2"}]}]
References
- advisory lists.apache.org
- advisory security.netapp.com
- web nvd.nist.gov