CVE-2024-31391

The Apache Solr Operator versions 0.3.0 through 0.8.0 are vulnerable to an Insertion of Sensitive Information into Log File (CWE-532) issue. When bootstrapping security with basic authentication and requiring authentication on probe endpoints (via .solrOptions.security.probesRequireAuth=true), th...

CVE-2024-31391 Apache Solr Operator: Solr-Operator liveness and readiness probes may leak basic auth credentials

Insertion of Sensitive Information into Log File vulnerability in the Apache Solr Operator. This issue affects all versions of the Apache Solr Operator from 0.3.0 through 0.8.0. When asked to bootstrap Solr security, the operator will enable basic authentication and create several accounts for...