CVE-2024-45216

Scores

EPSS

0.941high94.1%
0%20%40%60%80%100%

Percentile: 94.1%

CVSS

9.8critical3.x
0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x
9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Improper Authentication vulnerability in Apache Solr.

Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass.
A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path.
This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.

This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.

Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

anchore_overridesdebiannvdubuntu

CWEs

CWE-287

Related Vulnerabilities

Exploits

Exploit ID: CVE-2024-45216

Source: github-poc

URL: https://github.com/congdong007/CVE-2024-45216-Poc

Vulnerable Software (6)

Type: Configuration

Operating System:

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:a:apache:solr:*:*:*:*:*:maven:*:*",          "versionEndExcluding": "8.11.4",          "versionStartIncluding": ...

Source: anchore_overrides

Type: Configuration

Product: lucene-solr

Operating System: debian

Trait:
{  "unaffected": true}

Source: debian

Type: Configuration

Product: lucene-solr

Operating System: ubuntu focal 20.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: lucene-solr

Operating System: ubuntu oracular 24.10

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Product: lucene-solr

Operating System: ubuntu plucky 25.04

Trait:
{  "unfixed": true}

Source: ubuntu

Type: Configuration

Vendor: *

Product: solr

Operating System: * * *

Trait:
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",      "versionEndExcluding": "8.11.4",      "versionStartIncluding": "5.3.0",      "vulnerable": true    },    {...

Source: nvd

End of list