Executive brief
Incorrect Authorization in Apache Solr
Affected products
- Maven org.apache.solr:solr-solrj
- Maven org.apache.solr:solr-core
- Maven org.apache.solr:solr-parent
Junglewise Threat Intelligence
CVE-2020-13957: Incorrect Authorization in Apache Solr
CVE-2020-13957 · Severity: low · CVSS 3.1 · Published 2022-02-10
Technologies: org.apache.solr:solr-core (Maven), org.apache.solr:solr-parent (Maven). Vendors: Maven.
Related threats
- Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin
- Apache Solr: Insufficient file-access checking in standalone core-creation requests
- Apache Solr vulnerable to Execution with Unnecessary Privileges
- Apache Solr Relative Path Traversal vulnerability
- Apache Solr allows read access to host environmet variables