Lucene search
Veracode Vulnerability DatabaseVERACODE:45449HistoryFeb 12, 2024 - 2:14 p.m.
Insufficiently Protected Credentials
2024-02-1214:14:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
apache solr
vulnerability
sensitive system properties
Apache Solr is vulnerable to Insufficiently Protected Credentials. The vulnerability is caused due to system property redaction logic inconsistencies. This allows an attacker to access sensitive system properties, including credentials such as passwords or secret keys.
References
www.openwall.com/lists/oss-security/2024/02/09/4
github.com/advisories/GHSA-3hwc-rqwp-v36q
github.com/apache/solr/commit/659021c7d50164a3166887f24875228431b02102
github.com/apache/solr/commit/98c198810f2cd934d23d0d80aadb570a2bbb3b8e
solr.apache.org/security.html#cve-2023-50291-apache-solr-can-leak-certain-passwords-due-to-system-property-redaction-logic-inconsistencies
Related
osv
osv
CVE-2023-50291
2024-02-09 18:15:08
Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies
2024-02-09 18:31:07
BIT-solr-2023-50291
2024-03-06 11:05:31
prion
prion
Design/Logic Flaw
2024-02-09 18:15:00
cve
cve
CVE-2023-50291
2024-02-09 18:15:08
github
github
ubuntucve
ubuntucve
CVE-2023-50291
2024-02-09 00:00:00
redhatcve
redhatcve
CVE-2023-50291
2024-02-09 22:29:32
debiancve
debiancve
CVE-2023-50291
2024-02-09 18:15:08
cvelist
cvelist
ibm
ibm