CVE-2018-11802: Incorrect Authorization in Apache Solr
Summary
CVE-2018-11802: Incorrect Authorization in Apache Solr. Affects org.apache.solr:solr-parent versions < 7.7.0. Fixed in 7.7.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Apache Solr is an open-source search platform built on Apache Lucene. It provides full-text search, faceted search, and distributed search capabilities. Solr allows users to partition the cluster into multiple collections, with each collection hosted on a subset of nodes. However, prior to version 7.7, Solr had a vulnerability in its default authorization mechanism (RuleBasedAuthorizationPlugin). This vulnerability allowed unauthorized access to collections hosted on nodes that did not have the requested collection. Solr would proxy the request to a relevant node and serve it without applying any authorization settings.
Vulnerability Detail
The vulnerability (CVE-2018-11802) in Apache Solr allowed an attacker to bypass authorization settings and access collections hosted on nodes that did not have the requested collection. This could lead to unauthorized access to sensitive data or the execution of unauthorized actions within the affected Solr instance. The vulnerability affected all Solr versions prior to 7.7 that used the default authorization mechanism. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 4.3, indicating a moderate severity.
How To Fix
Minimum fixed version
7.7.0
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, a temporary workaround is to disable the RuleBasedAuthorizationPlugin and use an alternative authorization mechanism. This can be done by modifying the Solr configuration files to remove or comment out the configuration related to the RuleBasedAuthorizationPlugin. However, it is important to note that this workaround may have implications on the overall security of the Solr instance, and upgrading to the latest version is still recommended.
Conclusion
In conclusion, the vulnerability (CVE-2018-11802) in Apache Solr allowed unauthorized access to collections hosted on nodes that did not have the requested collection. This could lead to unauthorized access to sensitive data or unauthorized actions within the affected Solr instance. It is recommended to upgrade to Apache Solr version 7.7.0 or later to fix this vulnerability. If immediate upgrading is not feasible, a temporary workaround is to disable the RuleBasedAuthorizationPlugin and use an alternative authorization mechanism. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for org.apache.solr:solr-parent →
FAQ
Apache Solr is an open-source search platform built on Apache Lucene. It provides full-text search, faceted search, and distributed search capabilities.
The default authorization mechanism in Solr prior to version 7.7 is the RuleBasedAuthorizationPlugin.
The vulnerability allows unauthorized access to collections hosted on nodes that do not have the requested collection, bypassing all authorization settings. This can lead to unauthorized access to sensitive data or the execution of unauthorized actions within the affected Solr instance.
The CVSS score for this vulnerability is 4.3, indicating a moderate severity.
To fix this vulnerability, it is recommended to upgrade to Apache Solr version 7.7.0 or later. Alternatively, you can disable the RuleBasedAuthorizationPlugin and use an alternative authorization mechanism, although upgrading is still recommended.
References
Related vulnerabilities
Recent vulnerabilities recorded for org.apache.solr:solr-parent.
