CVE-2017-7660

Description

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism using the BasicAuthPlugin or if the user has implemented a custom Authentication plugin, which does not implement either HttpClientInterceptorPlugin or HttpClientBuilderPlugin, his/her servers are vulnerable to this attack. Users who only use SSL without basic authentication or those who use Kerberos are not affected.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.455

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-7660,CVE-2017-12629 are fixed in Apache-solr-core 5.5.5	Windows
Vulnerabilities CVE-2017-7660 are fixed in Apache-solr-core 6.6.0	Windows
Vulnerabilities CVE-2017-7660,CVE-2017-12629 are fixed in Apache-solr-core for Linux 5.5.5	Linux
Vulnerabilities CVE-2017-7660 are fixed in Apache-solr-core for Linux 6.6.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234