Insufficiently protected credentials in Apache Solr - CVE-2023-50291
Published: February 20, 2024
Vulnerability identifier: #VU86632
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-50291
CWE-ID: CWE-522
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to gain access to sensitive information.
The vulnerability exists due to an insecure redaction logic in the "/admin/info/properties" endpoint that hid only system properties with the "password" string inside their names. A remote user with "config-read" permission can obtain credentials stored in other properties, such as "basicauth" or "aws.secretKey".
Affected software
Apache Solr
Log Analysis
IBM OpenPages with Watson
Operational Decision Manager
Log Analysis
IBM OpenPages with Watson
Operational Decision Manager
How to mitigate CVE-2023-50291
Install updates from vendor's website.
Apache Solr - addressed in versions 8.11.2, 9.3.0
Log Analysis - update to 1.3.8.2
IBM OpenPages with Watson - addressed in versions 8.3.0.3, 9.0.0.3
Operational Decision Manager - addressed in versions 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3
Log Analysis - update to 1.3.8.2
IBM OpenPages with Watson - addressed in versions 8.3.0.3, 9.0.0.3
Operational Decision Manager - addressed in versions 8.10.5.1 Interim fix 54, 8.11.0.1 Interim fix 29, 8.11.1 Interim fix 21, 8.12.0.1 Interim fix 3