CVE-2017-9803

Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider). Firstly, access to the security configuration can be leaked to users other than the solr super user. Secondly, malicious users can exploit this leaked configuration for privilege escalation to further expose/modify private data and/or disrupt operations in the Solr cluster. The vulnerability is fixed from Apache Solr 6.6.1 onwards.

• CWE-287

• http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw%40mail.gmail.com%3E
• http://www.securityfocus.com/bid/100870Third Party Advisory, VDB Entry
• http://mail-archives.us.apache.org/mod_mbox/www-announce/201709.mbox/%3CCAOOKt53AOScg04zUh0%2BR_fcXD0C9s5mQ-OzdgYdnHz49u1KmXw%40mail.gmail.com%3E
• http://www.securityfocus.com/bid/100870Third Party Advisory, VDB Entry

Published

Sep 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9797When an Apache Geode cluster before v1.2.1 is operating in s…
• CVE-2017-9798Apache httpd allows remote attackers to read secret data fro…7.5
• CVE-2017-9799It was found that under some situations and configurations o…
• CVE-2017-9800A maliciously constructed svn+ssh:// URL would cause Subvers…
• CVE-2017-9801When a call-site passes a subject for an email that contains…
• CVE-2017-9802The Javascript method Sling.evalString() in Apache Sling Ser…
• CVE-2017-9804In Apache Struts 2.3.7 through 2.3.33 and 2.5 through 2.5.12…
• CVE-2017-9805The REST Plugin in Apache Struts 2.1.1 through 2.3.x before …8.1
• CVE-2017-9806A vulnerability in the OpenOffice Writer DOC file parser bef…7.8
• CVE-2017-9807An issue was discovered in the OpenWebif plugin through 1.2.…
• CVE-2017-9808OX Software GmbH OX App Suite 7.8.4 and earlier is affected …
• CVE-2017-9809OX Software GmbH OX App Suite 7.8.4 and earlier is affected …