GoogleOSV:GO-2024-2723

HistoryJun 04, 2024 - 3:19 p.m.

Apache Solr Operator liveness and readiness probes may leak basic auth credentials in github.com/apache/solr-operator

2024-06-0415:19:21

Google

osv.dev

apache solr operator

probes

leak

auth credentials

github

software

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

Apache Solr Operator liveness and readiness probes may leak basic auth credentials in github.com/apache/solr-operator

CPENameOperatorVersion
github.com/apache/solr-operatorlt0.8.1
github.com/apache/solr-operatorge0.3.0

CPE	Name	Operator	Version
	github.com/apache/solr-operator	lt	0.8.1
	github.com/apache/solr-operator	ge	0.3.0

References

www.openwall.com/lists/oss-security/2024/04/12/7

github.com/advisories/GHSA-g9qx-25vj-rf53

lists.apache.org/thread/w7011s78lzywzwyszvy4d8zm99ybt8c7

nvd.nist.gov/vuln/detail/CVE-2024-31391