Deserialization in Apache Solr
CVE-2019-0192
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.
Vulnerability class: Insecure Deserialization
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.782 (99.6th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.775 · newest: 0.782 · change: +0.007
Affected products
- Apache Solr
- Apache Software Foundation Solr — versions Apache Solr 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5
- NetApp Storage Automation Store
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.securityfocus.com/bid/107318 (VDB Entry, Third Party Advisory, vdb-entry)
- mail-archives.us.apache.org/mod_mbox/www-announce/201903.mbox/<CAECwjAV1buZwg+M… (Vendor Advisory, mailing-list, Mailing List, Mitigation)
- lists.apache.org/thread.html/b0ace855f569c6b7a0b03ba68566e53b1a1a519abd536bf389… (mailing-list)
- lists.apache.org/thread.html/42c5682f4acd1d03bd963e4f47ae448d7cff66c16b19142773… (mailing-list)
- lists.apache.org/thread.html/d0e608c681dfbb16b4da68d99d43fa0ddbd366bb3bcf5bc0d4… (mailing-list)
- lists.apache.org/thread.html/ec9c572fb803b26ba0318777977ee6d6a2fb3a2c50d9b4224e… (mailing-list)
- lists.apache.org/thread.html/53e4744b14fb7f1810405f8ff5531ab0953a23dd09ce8071ce… (mailing-list)
- access.redhat.com/errata/RHSA-2019:2413 (vendor-advisory)
- lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e763… (mailing-list)
- lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6… (mailing-list)
Frequently asked questions
- What is CVE-2019-0192?
- CVE-2019-0192 is a critical-severity vulnerability in Apache Solr, classified under Deserialization of Untrusted Data. CVSS score: 9.8/10. Published 2019-03-07.
- How severe is CVE-2019-0192?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2019-0192 known to be exploited?
- 31 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.