Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-0192
HistoryMar 07, 2019 - 9:29 p.m.

CVE-2019-0192

2019-03-0721:29:00
CWE-502
[email protected]
web.nvd.nist.gov
7

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr’s unsafe deserialization to trigger remote code execution on the Solr side.

Affected configurations

Nvd
Node
apachesolrRange5.0.0–5.5.5
OR
apachesolrRange6.0.0–6.6.5
Node
netappstorage_automation_storeMatch-
VendorProductVersionCPE
apachesolr*cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*
netappstorage_automation_store-cpe:2.3:a:netapp:storage_automation_store:-:*:*:*:*:*:*:*

References

Related

ibm 3
redhatcve 1
nessus 3
checkpoint_advisories 1
cvelist 1
github 1
osv 2
debiancve 1
veracode 1
ubuntucve 1
githubexploit 1
prion 1
cve 1
hackerone 1
thn 1
redhat 1
oracle 2
ibm
ibm
Security Bulletin: A vulnerability in Apache Solr affects IBM InfoSphere Information Server
2019-06-27 23:45:01
Security Bulletin: Potential vulnerability related to Unsafe Deserialization in Apache Solr shipped with IBM Operations Analytics - Log Analysis (CVE-2019-0192)
2019-04-23 04:50:01
Log Analysis Security Bulletin List
2021-09-01 11:04:11
redhatcve
redhatcve
CVE-2019-0192
2019-10-10 17:40:21
nessus
nessus
Apache Solr 5.x <= 5.5.5 or 6.x <= 6.6.5 Deserialization Vulnerability (CVE-2019-0192)
2019-07-03 00:00:00
Apache Solr 5.x <= 5.5.5 or 6.x <= 6.6.5 Deserialization Vulnerability
2019-03-27 00:00:00
Oracle Primavera Unifier Multiple Vulnerabilities (Jul 2019 CPU)
2019-07-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache Solr Config API Insecure Deserialization Remote Code Execution (CVE-2019-0192)
2019-04-03 00:00:00
cvelist
cvelist
CVE-2019-0192
2019-03-07 21:00:00
github
github
Critical severity vulnerability that affects org.apache.solr:solr-core
2019-03-14 15:39:45
osv
osv
CVE-2019-0192
2019-03-07 21:29:00
Critical severity vulnerability that affects org.apache.solr:solr-core
2019-03-14 15:39:45
debiancve
debiancve
CVE-2019-0192
2019-03-07 21:29:00
veracode
veracode
Remote Code Execution (RCE)
2019-03-08 03:28:52
ubuntucve
ubuntucve
CVE-2019-0192
2019-03-07 00:00:00
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Solr
2019-11-01 13:46:37
prion
prion
Remote code execution
2019-03-07 21:29:00
cve
cve
CVE-2019-0192
2019-03-07 21:29:00
hackerone
hackerone
U.S. Dept Of Defense: Remote Code Execution on █████████
2020-08-19 04:07:49
thn
thn
Linux Botnet Adding BlueKeep-Flawed Windows RDP Servers to Its Target List
2019-07-25 09:38:00
redhat
redhat
(RHSA-2019:2413) Important: Red Hat Fuse 7.4.0 security update
2019-08-08 10:07:26
oracle
oracle
Oracle Critical Patch Update Advisory - July 2019
2019-07-16 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.948

Percentile

99.3%

JSON
Related for NVD:CVE-2019-0192
ibm3redhatcve1nessus3checkpoint_advisories1cvelist1github1osv2debiancve1veracode1ubuntucve1githubexploit1prion1cve1hackerone1thn1redhat1oracle2