831 matches found
Apache Solr Remote Code Execution (CVE-2019-0193)
A remote code execution vulnerability exists in Apache Solr. Successful exploitation could result in execution of arbitrary code on the affected system...
Apache Solr Config API Velocity Template RCE (Direct Check)
Binary data apachesolr2019-1120unauthrce.nbin...
Apache Solr 8.1.1 / 8.2.0 Remote Code Execution Vulnerability
The version of Apache Solr running on the remote web server is affected by a remote code vulnerability as referenced in the advisory. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid131167; scriptversion"1.3"; scriptsetattributeattribute:"pluginmodificationdate",...
CVE-2019-12409
A flaw was discovered in Apache Solr, where it contains an insecure setting in the default configuration that exposes unauthenticated access to the JMX monitoring service. This flaw allows an attacker to upload malicious code for execution on the Solr server. Mitigation Per Solr guidance: "Make...
Apache Solr Bug Gets Bumped Up to High Severity
A bug impacting the Linux enterprise-search platform called Apache Solr has been revised from low to high-severity after researchers discovered a new remote code execution exploit. The warning comes from Tenable, which is reporting that the newly-identified default configuration vulnerability cou...
Apache Solr Velocity RCE
Remote command execution vulnerability in Apache Solr Velocity Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Apache Solr Remote Code Execution (CVE-2019-12409; CVE-2019-17558)
A remote code execution vulnerability exists in Apache Solr. Successful exploitation could result in execution of arbitrary code on the affected system...
Exploit for Unrestricted Upload of File with Dangerous Type in Apache Solr
CVE-2019-12409 Apache Solr RCE...
Remote Code Execution Vulnerability in Apache Solr Search Application Server
Apache Solr is an open source search server . Solr developed using the Java language , mainly based on HTTP and Apache Lucene implementation. A remote code execution vulnerability exists in the Apache Solr search application server that can be exploited by an attacker to execute remote code...
CVE-2019-12409
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...
CVE-2019-12409
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...
Default configuration
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...
CVE-2019-12409
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...
CVE-2019-12409
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...
CVE-2019-12409
CVE-2019-12409 affects Apache Solr 8.1.1 and 8.2.0 where the default solr.in.sh enables ENABLE_REMOTE_JMX_OPTS, exposing JMX on RMI_PORT 18983 without authentication. Unauthenticated network access to JMX can allow uploading and execution of malicious code on the Solr server. Public exploitation ...
CVE-2019-12409
The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLEREMOTEJMXOPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and...
PT-2019-4193 · Apache · Apache Solr
Name of the Vulnerable Software and Affected Versions: Apache Solr versions 8.1.1 through 8.2.0 Description: The issue is related to an insecure setting in the default solr.in.sh configuration file, which enables JMX monitoring without authentication on the RMI PORT default port 18983. This could...
The vulnerability of the Config software interface towards the Apache Solr search server allows a hacker to execute arbitrary code.
The vulnerability of the Config software interface of the Apache Solr search server lies in the rehydration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the Solr side through HTTP POST requests after deserialization...
Apache Solr Remote Code Execution Vulnerability (CNVD-2019-41288)
Apache Solr is the United States Apache Apache Software Foundation of a Lucene a full-text search engine based on the search server . The product supports level search , vertical search , highlighting search results and so on. A remote code execution vulnerability exists in Apache Solr. An attack...