Permissions, Privileges, and Access Controls in Apache Solr - CVE-2025-24814
Published: January 27, 2025
Vulnerability details
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to an error when handling configuration files. Solr instances that use the "FileSystemConfigSetService" component (the default in "standalone" or "user-managed" mode), and are running without authentication and authorization are vulnerable to a sort of privilege escalation wherein individual "trusted" configset files can be ignored in favor of potentially-untrusted replacements available elsewhere on the filesystem. These replacement config files are treated as "trusted" and can use "<lib>" tags to add to Solr's classpath, which an attacker might use to load malicious code as a searchComponent or other plugin.
Affected software
Log Analysis
Communications Unified Assurance
Operational Decision Manager
How to mitigate CVE-2025-24814
Log Analysis - update to 1.3.8.2