Rapid7 Vulnerability & Exploit Database

Apache Solr: CVE-2019-12409: Apache Solr RCE vulnerability due to bad config default

Free InsightVM Trial No Credit Card Necessary
Watch Demo See how it all works
Back to Search

Apache Solr: CVE-2019-12409: Apache Solr RCE vulnerability due to bad config default

Severity
7
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
11/18/2019
Created
11/28/2023
Added
11/27/2023
Modified
11/28/2023

Description

The 8.1.1 and 8.2.0 releases of Apache Solr contain an insecure setting for the ENABLE_REMOTE_JMX_OPTS configuration option in the default solr.in.sh configuration file shipping with Solr. If you use the default solr.in.sh file from the affected releases, then JMX monitoring will be enabled and exposed on RMI_PORT (default=18983), without any authentication. If this port is opened for inbound traffic in your firewall, then anyone with network access to your Solr nodes will be able to access JMX, which may in turn allow them to upload malicious code for execution on the Solr server.

Solution(s)

  • apache-solr-upgrade-latest

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;