Vulnerability record/PUBLISHED/Published Nov 18, 2019 20:50:59 UTC

CVE-2019-12409

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.

Base scoreN/A/ 10

SeverityNoneCVSS unscored

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityNone

No CVSS vector is available for this record.

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authorityapache

Last updatedAug 4, 2024 23:17:39 UTC

PublishedNov 18, 2019 20:50:59 UTC

ReservedMay 28, 2019 00:00:00 UTC