Apache Solr CVE-2017-7660 Security Bypass Vulnerability

Bugtraq ID:	99485
Class:	Design Error
CVE:	CVE-2017-7660
Remote:	Yes
Local:	No
Published:	Jul 07 2017 12:00AM
Updated:	Jul 07 2017 12:00AM
Credit:	Noble Paul
Vulnerable:	Apache Solr 6.5.1 Apache Solr 5.5.4 Apache Solr 6.0 Apache Solr 5.3
Not Vulnerable:	Apache Solr 6.6

Apache Solr CVE-2017-7660 Security Bypass Vulnerability

Apache Solr is prone to a security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks.

The following versions are affected:

Apache Solr 5.3 through 5.5.4 and
Apache Solr 6.0 through 6.5.1

Apache Solr CVE-2017-7660 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apache Solr CVE-2017-7660 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Solr CVE-2017-7660 Security Bypass Vulnerability

References:

• [ANNOUNCE] [SECURITY] CVE-2017-7660: Security Vulnerability in secure inter-node (Shalin Shekhar Mangar)
  
• Apache Solr Homepage (Apache)
  
• Security Vulnerability in secure inter-node communication in Apache Solr (Apache)