Information Disclosure

Apache Solr is vulnerable to information disclosure. The library can be configured to use kerberos delegation tokens, allowing a malicious user to reuse the token to authenticate as another user. This can allow the malicious user to view the security configuration or execute unauthorized actions.