CVE-2021-29943

Apache Solr Unprivileged users may be able to perform unauthorized read/write to collections

State: Published
Severity: Not scored
Published: Apr 13, 2021
Updated: Aug 3, 2024
Reserved: Apr 1, 2021

Description

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

Scores

The record has no CVSS score.

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
Apache SolrApache Software Foundation	Apache Solr to before 8.8.2Affected

References

https://lists.apache.org/thread.html/r91dd0ff556e0c9aab4c92852e0e540c59d4633718ce12881558cf44d%40%3Cusers.solr.apache.org%3E
https://security.netapp.com/advisory/ntap-20210604-0009/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.