Apache Solr には、認証の欠如に関する脆弱性が存在します。
Apache Software Foundation Apache Solr 6.6.0 から 6.6.6 Apache Solr 7.0.0 から 7.7.3 Apache Solr 8.0.0 から 8.6.2
情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Apache Software Foundation Mailing list archives : [CVE-2020-13957] The checks added to unauthenticated configset uploads in Apache Solr can be circumvented Pony Mail : [GitHub] [lucene-site] tflobbe closed pull request #32: Publish: Add CVE-2020-13957 page (#31) Pony Mail : [lucene-site] branch master updated: Add CVE-2020-13957 page (#31) Pony Mail : [jira] [Created] (BIGTOP-3507) Solr: CVE-2020-13957 mitigation backport Pony Mail : [jira] [Updated] (SOLR-14925) CVE-2020-13957: The checks added to unauthenticated configset uploads can be circumvented Pony Mail : [GitHub] [bigtop] iwasakims merged pull request #743: BIGTOP-3507: CVE-2020-13957 mitigation backport Pony Mail : [jira] [Commented] (SOLR-14925) CVE-2020-13957: The checks added to unauthenticated configset uploads can be circumvented Pony Mail : [GitHub] [lucene-site] tflobbe commented on pull request #32: Publish: Add CVE-2020-13957 page (#31) Pony Mail : [jira] [Resolved] (BIGTOP-3507) Solr: CVE-2020-13957 mitigation backport Pony Mail : [GitHub] [lucene-site] tflobbe opened a new pull request #31: Add CVE-2020-13957 page Pony Mail : [GitHub] [lucene-site] tflobbe opened a new pull request #32: Publish: Add CVE-2020-13957 page (#31) Pony Mail : [GitHub] [bigtop] JunHe77 commented on pull request #743: BIGTOP-3507: CVE-2020-13957 mitigation backport Pony Mail : [GitHub] [lucene-site] tflobbe merged pull request #31: Add CVE-2020-13957 page Pony Mail : [jira] [Updated] (SOLR-14925) CVE-2020-13957: The checks added to unauthenticated configset uploads can be circumvented Pony Mail : [jira] [Commented] (SOLR-14925) CVE-2020-13957: The checks added to unauthenticated configset uploads can be circumvented Pony Mail : [jira] [Created] (BIGTOP-3507) Solr: CVE-2020-13957 mitigation backport Pony Mail : [lucene-site] 02/02: Add CVE-2020-13957 page (#31) Pony Mail : [jira] [Assigned] (BIGTOP-3507) Solr: CVE-2020-13957 mitigation backport Pony Mail : [bigtop] branch master updated: BIGTOP-3507: CVE-2020-13957 mitigation backport (#743) Pony Mail : [GitHub] [bigtop] JunHe77 opened a new pull request #743: BIGTOP-3507: CVE-2020-13957 mitigation backport
認証の欠如(CWE-862) [NVD評価]
CVE-2020-13957
National Vulnerability Database (NVD) : CVE-2020-13957
[2021年04月28日] 掲載
