Apache Solr CVE-2018-11802 Authorization Bypass Vulnerability
BID:108078
Info
Apache Solr CVE-2018-11802 Authorization Bypass Vulnerability
| Bugtraq ID: | 108078 |
| Class: | Access Validation Error |
| CVE: |
CVE-2018-11802 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 24 2019 12:00AM |
| Updated: | Apr 24 2019 12:00AM |
| Credit: | Mahesh Kumar Vasanthu Somashekar. |
| Vulnerable: |
Apache Solr 7.6 Apache Solr 7.3.1 Apache Solr 7.0 Apache Solr 6.6.5 Apache Solr 6.6.4 Apache Solr 6.6.3 Apache Solr 6.6.2 Apache Solr 6.6.1 Apache Solr 7.3 Apache Solr 6.6 Apache Solr 6.5 Apache Solr 6.4 Apache Solr 6.3 Apache Solr 6.2 Apache Solr 6.1 Apache Solr 6.0 |
| Not Vulnerable: |
Apache Solr 6.6.6 Apache Solr 7.7 |
References
Apache Solr CVE-2018-11802 Authorization Bypass Vulnerability
References:
References:
- CVE-2018-11802: Apache Solr authorization bug vulnerability disclosure (Seclists.org)
- Apache Homepage (Apache)
- Re: CVE-2018-11802: Apache Solr authorization bug vulnerability disclosure (Apache)
- Rule-base Authorization plugin skips authorization if querying node does not hav (Apache Software Foundation)