The vulnerability of the PKIAuthenticationPlugin plugin for the Apache Solr search server allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 31 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

PKIAuthenticationPlugin vulnerability exposes confidentiality and integrity risks in Apache Solr.

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to Solr Core	10 Feb 202614:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified in Apache Solr shipped with IBM Operations Analytics - Log Analysis	25 Apr 202512:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	27 Feb 202517:03	–	ibm
GithubExploit	Exploit for Incorrect Authorization in Apache Solr	2 Dec 202404:09	–	githubexploit
Circl	CVE-2024-45216	16 Oct 202411:20	–	circl
CNNVD	Apache Solr 安全漏洞	16 Oct 202400:00	–	cnnvd
CNVD	Apache Solr Authentication Error Vulnerability	23 Oct 202400:00	–	cnvd
CVE	CVE-2024-45216	16 Oct 202407:50	–	cve
Cvelist	CVE-2024-45216 Apache Solr: Authentication bypass possible using a fake URL Path ending	16 Oct 202407:50	–	cvelist
Debian CVE	CVE-2024-45216	16 Oct 202407:50	–	debiancve

Vulners

Node

apache solrRange5.3.0–8.11.4

OR

apache solrRange9.0.0–9.7.0

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45216
vuldb	www.vuldb.com/
lists	www.lists.apache.org/thread/vnh2dzzo4013qlf9ho4w8fr5xhn5zqq5
solr	www.solr.apache.org/security.html
web	www.web.nvd.nist.gov/view/vuln/detail

31 Oct 2024 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 39.8

CVSS 210

EPSS0.90709

public key infrastructure apache solr authentication vulnerability data confidentiality data integrity risk exposure