Security Bulletin: Vulnerability in Apache Solr affects IBM Operations Analytics - Log Analysis (CVE-2017-1000190)

2021-04-2205:45:13

www.ibm.com

apache solr

ibm operations analytics

log analysis

xxe vulnerability

cve-2017-1000190

ssrf

information disclosure

dos attacks

xml external entity injection

log analysis versions 1.3.1 to 1.3.6

upgrade

fix

download

EPSS

0.004

Percentile

73.3%

JSON

Summary

There is a potential XXE vulnerability in Apache Solr… This has been addressed.

Vulnerability Details

CVEID:CVE-2017-1000190
**DESCRIPTION:**SimpleXML is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to perform SSRF, information disclosure or DoS attacks.
CVSS Base score: 9.8
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/135088 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)