Tracker / CVE-2019-0192
CVE-2019-0192
Critical 9.8
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.
Affected products and versions
| apache | solr · 5.0.0 → 5.5.5 |
|---|---|
| apache | solr · 6.0.0 → 6.6.5 |
| netapp | storage_automation_store |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.