Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2021-29943

Опубликовано: 13 апр. 2021
Источник: debian

Описание

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
lucene-solrnot-affectedpackage

Связанные уязвимости

CVSS3: 9.1
ubuntu
почти 5 лет назад

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

CVSS3: 9.1
redhat
почти 5 лет назад

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

CVSS3: 9.1
nvd
почти 5 лет назад

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

CVSS3: 9.1
github
больше 4 лет назад

Incorrect Authorization in Apache Solr