CVE-2020-13941

2020-08-1707:13:38

redhat.com

access.redhat.com

solr

replication handler

data confidentiality

data integrity

system availability

exfiltration of sensitive data

non-validated parameters

ntlm hashes

lm hashes

data exfiltration

EPSS

0.006

Percentile

79.3%

JSON

A flaw was found in Solr. The Replication handler allows commands backup, restore, and delete backup that take non-validated allocation parameters which may result in the exfiltration of sensitive data such as OS user hashes (NTLM/LMhashes). The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.