CVE-2021-29943

Fixed upstream EPSS 5%

When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.

Published 2021-04-13 · CVE record · OSV

Products: Apache Software Foundation Apache Solr

Fixed upstream

Distro releases