CVE-2021-29943: Incorrect Authorization

May 10, 2021 (updated June 10, 2021)

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

References

github.com/advisories/GHSA-vf7p-j8x6-xvwp
nvd.nist.gov/vuln/detail/CVE-2021-29943

Detect and mitigate CVE-2021-29943 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →