REDHAT-BUG-1692345: High severity Apache SOLR vulnerability
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.
Reference: http://mail-archives.us.apache.org/modmbox/www-announce/201903.mbox/%3CCAECwjAV1buZwg%2BMcV9EAQ19MeAWztPVJYD4zGK8kQdADFYij1w%40mail.gmail.com%3E
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1692345?
The severity of REDHAT-BUG-1692345 is critical due to the potential for remote code execution.
How do I fix REDHAT-BUG-1692345?
To fix REDHAT-BUG-1692345, upgrade Apache Solr to version 5.5.6 or later, or version 6.6.6 or later.
Which versions of Apache Solr are affected by REDHAT-BUG-1692345?
Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5 are affected by REDHAT-BUG-1692345.
What is the attack vector for REDHAT-BUG-1692345?
The attack vector for REDHAT-BUG-1692345 involves using the Config API to configure the JMX server via a malicious HTTP POST request.
What type of vulnerability is REDHAT-BUG-1692345?
REDHAT-BUG-1692345 is a vulnerability that allows for remote code execution through unsafe deserialization in Apache Solr.