Insufficiently Protected Credentials vulnerability in Apache Solr

CVE-2023-50291

Summary

A vulnerability in Apache Solr allows sensitive system properties to be exposed via the '/admin/info/properties' endpoint. This endpoint, which is intended to display Java system properties, is only designed to hide properties containing 'password' in their names. As a result, other sensitive properties, such as 'basicauth' and 'aws.secretKey', remain visible in the Solr Admin UI, potentially unauthorized access to crucial credentials. This affects users with 'config-read' permission in Solr Clouds with Authorization enabled. To mitigate the risk, users are advised to upgrade to Apache Solr versions 9.3.0 or 8.11.3 or apply specific Java system properties to enhance security.

References