{"id":"CVE-2017-3163","published":"2017-08-30T14:00:00Z","modified":"2024-09-16T18:39:30Z","title":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an…","vendor":"Apache","product":"Apache Solr","tier":"tail","description":{"text":"When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However, Solr before 5.5.4 and 6.x before 6.4.1 did not validate the file name, hence it was possible to craft a special request involving path traversal, leaving any file readable to the Solr server process exposed. Solr servers protected and restricted by firewall rules and/or authentication would not be at risk since only trusted clients and users would gain direct HTTP access.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.06559,"percentile":0.9379,"provenance":"source"},"cwes":[],"references":[{"url":"https://access.redhat.com/errata/RHSA-2018:1448","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1449","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1450","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1451","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.apache.org/thread.html/a6a33a186f293f9f9aecf3bd39c76252bfc49a79de4321dd2a53b488%40%3Csolr-user.lucene.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1447","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.debian.org/security/2018/dsa-4124","tags":["vendor-advisory","x_refsource_DEBIAN"]}],"priority":{"score":18.8,"factors":[{"name":"EPSS percentile","points":18.76}]},"vendorSlug":"apache","affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache Solr","versions":["1.4.0 to 5.5.3","6.0.0 to 6.4.0"]}],"affected":[{"ecosystem":"Maven","package":"org.apache.solr:solr-core","vulnerableRanges":["<5.5.4",">=6.0.0, <6.4.1"],"patched":["5.5.4","6.4.1"],"from":["GHSA-387v-84cv-9qmc"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0485","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2019-12401","published":"2019-09-10","fixed":"5.0.0","kev":false},{"cve":"CVE-2015-8795","published":"2016-02-15","fixed":"5.1.0","kev":false},{"cve":"CVE-2015-8797","published":"2016-02-15","fixed":"5.3.1","kev":false,"link":{"from":"CVE-2015-8797","to":"CVE-2017-3163","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.solr:solr-core","fromFixed":"5.3.1","toFixed":"5.5.4","daysApart":562}]}},{"cve":"CVE-2017-3163","published":"2017-08-30","fixed":"6.4.1","kev":false},{"cve":"CVE-2017-7660","published":"2017-07-07","fixed":"6.6.0","kev":false},{"cve":"CVE-2017-9803","published":"2017-09-18","fixed":"6.6.1","kev":false},{"cve":"CVE-2019-0192","published":"2019-03-07","fixed":"7.0.0","kev":false},{"cve":"CVE-2017-12629","published":"2017-10-14","fixed":"7.1.0","kev":false,"link":{"from":"CVE-2017-3163","to":"CVE-2017-12629","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Maven:org.apache.solr:solr-core","fromFixed":"5.5.4","toFixed":"5.5.5","daysApart":45}]}}],"package":"Maven:org.apache.solr:solr-core"}}