org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-9803 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-9803 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...

CVE-2017-9803

Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider...

org.apache.carbondata:carbondata-datamap-examples (>=1.4.0, <=1.6.1), org.apache.carbondata:carbondata-examples (>=2.0.0, <=2.2.0) +10 more potentially affected by CVE-2017-9803 via org.apache.solr:solr-core (6.3.0)

org.apache.solr:solr-core MAVEN version 6.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.solr:solr-core and may be impacted: - org.apache.carbondata:carbondata-datamap-examples =1.4.0, =2.0.0, =1.6.0, =1.4.0, =2.0.0,...

CVE-2017-9803

CVE-2017-9803 affects Apache Solr’s Kerberos plugin, where delegation tokens can enable reuse of an end-user’s authentication. The documented issues include leakage of security configuration to non-super users and potential privilege escalation by malicious users when using a SecurityAwareZkACLPr...