VYPR
Critical severityNVD Advisory· Published Mar 7, 2019· Updated Sep 16, 2024

CVE-2019-0192

CVE-2019-0192

Description

In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.solr:solr-coreMaven
>= 5.0.0, < 7.0.07.0.0
org.apache.solr:solr-coreMaven
>= 6.0.0, < 7.0.07.0.0

Affected products

2

Patches

Vulnerability mechanics

References

25

News mentions

0

No linked articles in our index yet.