CVE-2019-12409

🗓️ 20 Nov 2019 20:07:26Reported by redhat.comType

Apache Solr insecure default configuration allows unauthenticated access to JMX monitoring service which could lead to execution of malicious cod

Reporter	Title	Published	Views	Family All 23
GithubExploit	Exploit for Unrestricted Upload of File with Dangerous Type in Apache Solr	19 Nov 201908:53	–	githubexploit
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	8 Dec 202020:38	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	6 May 202015:20	–	gitee
ATTACKERKB	Apache Solr 8.11, 8.20 have unauthenticated JMX server enabled in default config	11 Sep 201900:00	–	attackerkb
Tenable Nessus	Apache Solr 8.1.1, 8.2.0 Remote JMX RMI Deserialization Vulnerability	19 Dec 201900:00	–	nessus
Tenable Nessus	Apache Solr 8.1.1 / 8.2.0 Remote Code Execution Vulnerability	21 Nov 201900:00	–	nessus
Tenable Nessus	Apache Solr 8.1.1 < 8.3.0 Remote Code Execution	27 Jan 202000:00	–	nessus
Circl	CVE-2019-12409	26 Nov 201904:00	–	circl
CNVD	Remote Code Execution Vulnerability in Apache Solr Search Application Server	19 Nov 201900:00	–	cnvd
Check Point Advisories	Apache Solr Remote Code Execution (CVE-2019-12409; CVE-2019-17558)	20 Nov 201900:00	–	checkpoint_advisories

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-12409
lucene	www.lucene.apache.org/solr/news.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

19 Apr 2024 21:19Current

1.8Low risk

Vulners AI Score1.8

CVSS 27.5

CVSS 3.19.8

CVSS 39.1

EPSS0.8277