Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response: Is Solr vulnerable to CVE-2017-3164?

CB Response: Is Solr vulnerable to CVE-2017-3164?

Environment

CB Response Server: All Versions

Question

Is Solr vulnerable to CVE-2017-3164 fixed in Solr 7.7?

Answer

With IP tables set correctly this is not a vulnerability with the product. If you are not using CBR to manage iptables, ensure that the solr port 8080 is only accessible by the master and minions to master (if clustered). Solr admin console should be locked down to only IP's that need access.

Additional Notes

Two product enhancements have been created to address this within the product. CB-26353 and CB-26354

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
224
Contributors