apache solr CVE-2019-12409 is a vulnerability in Apache Solr
Published on November 18, 2019

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.

NVD


Products Associated with CVE-2019-12409

Want to know whenever a new CVE is published for Apache Solr? stack.watch will email you.

Apache Solr
 

Affected Versions

Apache Solr Version 8.1.1 and 8.2.0 for Linux is affected by CVE-2019-12409

Exploit Probability

EPSS
82.77%
Percentile
99.22%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.