CVE-2024-45216 Scanner

Apache Solr is a popular open-source search platform commonly used by enterprises for indexing and searching large volumes of data. Primarily utilized by large-scale websites and organizations, Solr facilitates fast and reliable search features across various digital content. It's especially popular within big data applications and is often integrated with data management systems. This software supports distributed indexing and load balancing, making it ideal for high-availability environments. Administrators typically use Solr to enhance search performance and data accessibility for end-users.

The authorization bypass vulnerability in Apache Solr allows unauthorized access to specific API endpoints. This bypass occurs due to the flawed handling of appended URL paths, which skips the usual authentication checks. Attackers can exploit this vulnerability by appending specific paths to URLs, gaining access to sensitive administrative functionalities. The issue affects a range of versions, making upgrading critical for secure operations.

The vulnerability leverages a specific issue within Solr’s PKIAuthenticationPlugin when processing URLs. By appending a fake URL ending to a Solr API path, malicious actors can bypass the authentication controls. Although Solr removes the fake ending before routing the API call, it erroneously bypasses the authentication check. The vulnerability is particularly dangerous because it requires no special privileges or user interaction, making it exploitable remotely. Affected endpoints include administrative paths such as /solr/admin/info/properties.

If exploited, attackers could gain unauthorized access to administrative sections of the Apache Solr instance. This access may expose sensitive configurations and operational data or allow attackers to modify system properties. In turn, it could lead to data breaches, integrity issues, or potentially allow further exploitation of the system. Malicious users may also gain visibility into backend infrastructure, increasing the potential for additional attacks.

Security for Everyone provides a powerful scanning solution for identifying critical vulnerabilities like authorization bypasses within enterprise-grade applications. Through the platform, users can proactively detect, monitor, and remediate vulnerabilities, safeguarding their systems before attackers can exploit them. With S4E, users benefit from an easy-to-navigate dashboard, detailed reporting, and actionable insights to enhance their overall security posture. By joining the S4E platform, organizations gain access to automated, reliable security checks for their exposed digital assets.

References:

• https://shfsec.com/cve-2024-45216-authentication-bypass-in-apache-solr
• https://nvd.nist.gov/vuln/detail/CVE-2024-45216
• https://solr.apache.org/security html#cve-2024-45216-apache-solr-authentication-bypass-possible-using-a-fake-url-path-ending