Lucene search

K
osvGoogleOSV:GHSA-VF7P-J8X6-XVWP
HistoryMay 10, 2021 - 3:17 p.m.

Incorrect Authorization in Apache Solr

2021-05-1015:17:58
Google
osv.dev
12
apache solr
authorization
authentication

EPSS

0.001

Percentile

50.6%

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

EPSS

0.001

Percentile

50.6%