CVE-2017-3163: Path Traversal
When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
Other sources
When using the Index Replication feature, Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
References:
http://lucene.472066.n3.nabble.com/SECURITY-CVE-2017-3163-Apache-Solr-ReplicationHandler-path-traversal-attack-td4320619.html
Upstream issue:
https://issues.apache.org/jira/browse/SOLR-10031
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3163?
CVE-2017-3163 has a high severity rating due to its potential to allow unauthorized file access on Apache Solr nodes.
How do I fix CVE-2017-3163?
To fix CVE-2017-3163, upgrade Apache Solr to version 5.5.4 or higher, or to version 6.4.1 or higher.
Which versions of Apache Solr are affected by CVE-2017-3163?
Apache Solr versions prior to 5.5.4 and 6.x before 6.4.1 are affected by CVE-2017-3163.
What is the impact of not addressing CVE-2017-3163?
Not addressing CVE-2017-3163 could allow attackers to exploit path traversal vulnerabilities to access sensitive files on the server.
Is CVE-2017-3163 specific to any configuration of Apache Solr?
CVE-2017-3163 specifically affects instances of Apache Solr utilizing the Index Replication feature without proper input validation.