Strix
26.1K

CVE-2017-7660

UnknownEPSS 5.53%

Last modified

CVE-2017-7660 is a vulnerability of currently unknown severity. Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. EPSS estimates a 5.53% chance of exploitation in the next 30 days.

Description

Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism using the BasicAuthPlugin or if the user has implemented a custom Authentication plugin, which does not implement either "HttpClientInterceptorPlugin" or "HttpClientBuilderPlugin", his/her servers are vulnerable to this attack. Users who only use SSL without basic authentication or those who use Kerberos are not affected.

Metrics

EPSS Probability
5.53%

91.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
ApacheSolr5.3.0
ApacheSolr5.3.1
ApacheSolr5.3.2
ApacheSolr5.4.0
ApacheSolr5.4.1
ApacheSolr5.5.0
ApacheSolr5.5.1
ApacheSolr5.5.2
ApacheSolr5.5.3
ApacheSolr5.5.4
ApacheSolr6.0.0
ApacheSolr6.0.1
ApacheSolr6.1.0
ApacheSolr6.2.0
ApacheSolr6.2.1
ApacheSolr6.3.0
ApacheSolr6.4.0
ApacheSolr6.4.1
ApacheSolr6.4.2
ApacheSolr6.5.0
ApacheSolr6.5.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-7660?
Apache Solr uses a PKI based mechanism to secure inter-node communication when security is enabled. It is possible to create a specially crafted node name that does not exist as part of the cluster and point it to a malicious node. This can trick the nodes in cluster to believe that the malicious node is a member of the cluster. So, if Solr users have enabled BasicAuth authentication mechanism using the BasicAuthPlugin or if the user has implemented a custom Authentication plugin, which does not implement either "HttpClientInterceptorPlugin" or "HttpClientBuilderPlugin", his/her servers are vulnerable to this attack. Users who only use SSL without basic authentication or those who use Kerberos are not affected.
How severe is CVE-2017-7660?
Severity scoring for CVE-2017-7660 is pending analysis. The EPSS model estimates a 5.53% probability of exploitation in the next 30 days.
How do I fix CVE-2017-7660?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-7660?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST