Lucene search

Apache Solr 8.11, 8.20 have unauthenticated JMX server enabled in default config

🗓️ 11 Sep 2019 00:00:00Reported by AttackerKBType

Apache Solr 8.11, 8.20 unauthenticated JMX server exposed in default confi

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 18
UbuntuCve	CVE-2019-12409	18 Nov 201900:00	–	ubuntucve
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Solr	19 Nov 201908:53	–	githubexploit
NVD	CVE-2019-12409	18 Nov 201921:15	–	nvd
Symantec	Apache Solr for Linux CVE-2019-12409 Remote Code Execution Vulnerability	12 Aug 201900:00	–	symantec
OSV	Unrestricted upload of file with dangerous type in Apache Solr	28 Jan 202022:26	–	osv
OSV	CVE-2019-12409	18 Nov 201921:15	–	osv
ThreatPost	Apache Solr Bug Gets Bumped Up to High Severity	20 Nov 201919:41	–	threatpost
Cvelist	CVE-2019-12409	18 Nov 201920:50	–	cvelist
RedhatCVE	CVE-2019-12409	20 Nov 201920:07	–	redhatcve
Prion	Default configuration	18 Nov 201921:15	–	prion

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
lists	www.lists.apache.org/thread.html/6640c7e370fce2b74e466a605a46244ccc40666ad9e3064a4e04a85d@%3Csolr-user.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/ce7c0b456b15f6c7518adefa54ec948fed6de8e951a2584500c1e541@%3Cissues.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/925cdb49ceae78baddb45da7beb9b4d2b1ddc4a8e318c65e91fb4e87@%3Cissues.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/a044eae4f6f5b0160ece5bf9cc4c0dad90ce7dd9bb210a9dc50b54be@%3Cgeneral.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/47e112035b4aa67ece3b75dbcd1b9c9212895b9dfe2a71f6f7c174e2@%3Cannounce.apache.org%3E
support	www.support.f5.com/csp/article/K23720587
github	www.github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-12409-RCE%20Vulnerability%20Due%20to%20Bad%20Defalut%20Config-Apache%20Solr

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Sep 2019 00:00Current

9.3High risk

Vulners AI Score9.3

EPSS0.83312