CVE-2024-45216: Apache Solr: Authentication bypass possible using a fake URL Path ending
Apache Solr could allow a remote attacker to bypass security restrictions, caused by improper authentication validation when using PKIAuthenticationPlugin. By sending a specially crafted request using a fake URL Path ending, an attacker could exploit this vulnerability to bypass access restriction.
Other sources
Improper Authentication vulnerability in Apache Solr.
Solr instances using the PKIAuthenticationPlugin, which is enabled by default when Solr Authentication is used, are vulnerable to Authentication bypass. A fake ending at the end of any Solr API URL path, will allow requests to skip Authentication while maintaining the API contract with the original URL Path. This fake ending looks like an unprotected API path, however it is stripped off internally after authentication but before API routing.
This issue affects Apache Solr: from 5.3.0 before 8.11.4, from 9.0.0 before 9.7.0.
Users are recommended to upgrade to version 9.7.0, or 8.11.4, which fix the issue.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45216?
CVE-2024-45216 is considered a critical vulnerability due to its potential for authentication bypass.
How do I fix CVE-2024-45216?
To remediate CVE-2024-45216, upgrade Apache Solr to version 9.7.0 or 8.11.4 if you are using affected versions.
What versions of Apache Solr are affected by CVE-2024-45216?
Versions of Apache Solr between 5.3.0 and 9.6.x are affected by CVE-2024-45216 if using the PKIAuthenticationPlugin.
What is the cause of CVE-2024-45216?
CVE-2024-45216 is caused by improper authentication which allows attackers to bypass authentication using a fake URL path.
Is CVE-2024-45216 specific to any particular plugin in Apache Solr?
Yes, CVE-2024-45216 specifically affects the PKIAuthenticationPlugin which is enabled by default in Solr.