REDHAT-BUG-1454783: Path Traversal
When using the Index Replication feature, Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.
References:
http://lucene.472066.n3.nabble.com/SECURITY-CVE-2017-3163-Apache-Solr-ReplicationHandler-path-traversal-attack-td4320619.html
Upstream issue:
https://issues.apache.org/jira/browse/SOLR-10031
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1454783?
The severity of REDHAT-BUG-1454783 is classified as high due to the potential for unauthorized file access.
How do I fix REDHAT-BUG-1454783?
To fix REDHAT-BUG-1454783, it is recommended to upgrade to the latest version of Apache Solr that addresses the path traversal vulnerability.
What are the potential impacts of REDHAT-BUG-1454783?
The potential impacts of REDHAT-BUG-1454783 include exposure of sensitive files and unauthorized data access on the Solr nodes.
Who is affected by REDHAT-BUG-1454783?
Any installation of Apache Solr that utilizes the Index Replication feature without proper validation is affected by REDHAT-BUG-1454783.
What is the nature of the vulnerability in REDHAT-BUG-1454783?
The nature of the vulnerability in REDHAT-BUG-1454783 involves a path traversal issue that allows attackers to access unintended files on the server.