Login Request a demo
Critical severity · published Mar 7, 2019
CVE-2019-0192
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request
9.8
CVSS
78.2%
EPSS
No
On KEV
Description
In Apache Solr versions 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5, the Config API allows to configure the JMX server via an HTTP POST request. By pointing it to a malicious RMI server, an attacker could take advantage of Solr's unsafe deserialization to trigger remote code execution on the Solr side.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)78.2% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Apache Solr · Apache Software Foundation
Apache Solr 5.0.0 to 5.5.5 and 6.0.0 to 6.6.5 · source: vendor
SO
Solr · Apache
5.0.0 through 5.5.5; 6.0.0 through 6.6.5 · source: NVD
SA
Storage Automation Store · Netapp
All versions, or not specified · source: NVD
Affected product
AS
Apache Solr
Apache Software Foundation
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-0192
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-0192
Mailing List
http://mail-archives.us.apache.org/mod_mbox/www-announce/201903.mbox/%3CCAECwjAV1buZwg%2BMcV9EAQ19MeAWztPVJYD4zGK8kQdADFYij1w%40mail.gmail.com%3E
Third Party Advisory
http://www.securityfocus.com/bid/107318
access.redhat.com
https://access.redhat.com/errata/RHSA-2019:2413
lists.apache.org
https://lists.apache.org/thread.html/42c5682f4acd1d03bd963e4f47ae448d7cff66c16b19142773818892%40%3Cdev.lucene.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/53e4744b14fb7f1810405f8ff5531ab0953a23dd09ce8071ce87e00d%40%3Cdev.lucene.apache.org%3E
lists.apache.org
https://lists.apache.org/thread.html/b0ace855f569c6b7a0b03ba68566e53b1a1a519abd536bf38978ce4a%40%3Cdev.lucene.apache.org%3E
More from Apache Solr
9.8
CVE-2026-44825
Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users
7.5
CVE-2017-3164
Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive)