CVE-2021-29943
Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections
Résumé
Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections
Description d'origine
La description telle que publiée par la source (souvent en anglais).
When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
solr
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"8.8.2"}]}]
Références
- advisory lists.apache.org
- advisory security.netapp.com
- web nvd.nist.gov