Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30415
HistoryMay 11, 2021 - 6:58 a.m.

Insecure Access Control

2021-05-1106:58:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
solr-core
access control
vulnerability
read-only user

EPSS

0.004

Percentile

73.4%

solr-core uses insecure access controls. A node that is configured with the optional read-only user, and with SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, would not be treated as a sensitive path and would allow it to be readable

References