Published: 13/04/2021 Updated: 08/06/2021

CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10

CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9

VMScore: 571

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions before 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache solr

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 882 would forward/proxy distributed requests using server credentials instead of original client credentials This would result in incorrect authorization resolution on the receiving hosts ...

CWE-863 https://lists.apache.org/thread.html/r91dd0ff556e0c9aab4c92852e0e540c59d4633718ce12881558cf44d%40%3Cusers.solr.apache.org%3E https://security.netapp.com/advisory/ntap-20210604-0009/https://nvd.nist.gov https://access.redhat.com/security/cve/cve-2021-29943

CVE-2021-29943

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect