Логотип exploitDog
bind:CVE-2021-29262
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2021-29262

Количество 5

Количество 5

ubuntu логотип

CVE-2021-29262

почти 5 лет назад

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2021-29262

почти 5 лет назад

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.

CVSS3: 5.9
EPSS: Средний
nvd логотип

CVE-2021-29262

почти 5 лет назад

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2021-29262

почти 5 лет назад

When starting Apache Solr versions prior to 8.8.2, configured with the ...

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-jgcr-fg3g-qvw8

больше 4 лет назад

Improper permission handling in Apache Solr

CVSS3: 7.5
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2021-29262

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.

CVSS3: 7.5
26%
Средний
почти 5 лет назад
redhat логотип
CVE-2021-29262

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.

CVSS3: 5.9
26%
Средний
почти 5 лет назад
nvd логотип
CVE-2021-29262

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.

CVSS3: 7.5
26%
Средний
почти 5 лет назад
debian логотип
CVE-2021-29262

When starting Apache Solr versions prior to 8.8.2, configured with the ...

CVSS3: 7.5
26%
Средний
почти 5 лет назад
github логотип
GHSA-jgcr-fg3g-qvw8

Improper permission handling in Apache Solr

CVSS3: 7.5
26%
Средний
больше 4 лет назад

Уязвимостей на страницу