Remote Code Execution Risk in Apache Solr by Vendor Apache
CVE-2019-12409

9.8CRITICAL

Key Information:

Vendor: Apache
Status: Solr
Vendor: CVE Published:; 18 November 2019

Badges

👾 Exploit Exists🟡 Public PoC

Summary

The Apache Solr releases 8.1.1 and 8.2.0 introduce a significant security vulnerability due to an insecure default configuration for the ENABLE_REMOTE_JMX_OPTS option in the solr.in.sh file. When using the default settings, JMX monitoring is enabled on RMI_PORT (default=18983) without any authentication. If this port is accessible over the network, unauthorized users can send requests that may lead to the execution of malicious code on the Solr server, potentially compromising sensitive data and system integrity.

Affected Version(s)

Solr 8.1.1 and 8.2.0 for Linux

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-12409
Created by jas502n