Skip to content
Fencer Intel
medium 4.3

CVE-2018-11802 json

Incorrect Authorization in Apache Solr

published 2020-04-01 6 y ago modified 2026-06-17 4 mo ago also GHSA-j346-h5wc-rw2m , EUVD-2022-1062

cvss
4.3
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.0%
EPSS 2.0% chance of exploitation in 30 days, percentile 81%
public exploits
0
none known

Summary

In Apache Solr, the cluster can be partitioned into multiple collections and only a subset of nodes actually host any given collection. However, if a node receives a request for a collection it does not host, it proxies the request to a relevant node and serves the request. Solr bypasses all authorization settings for such requests. This affects all Solr versions prior to 7.7 that use the default authorization mechanism of Solr (RuleBasedAuthorizationPlugin).

Patch / fix

  • maven org.apache.solr:solr-parent 6.6.6, 7.7.0
  • maven org.apache.solr:solr-core 6.6.6, 7.7.0
  • apache solr 6.6.6, 7.7.0

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2018-11802 updated cvss 4.3

solr: Information disclosure via Rule-base Authorization plugin

  • Red Hat JBoss Developer Studio 11 solr solr Red Hat JBoss Data Grid 6 solr-core Red Hat JBoss Data Virtualization 6 solr-core Red Hat JBoss Enterprise Application Platform 6 solr-core Red Hat JBoss Fuse 6 solr-core Red Hat JBoss Fuse Service Works 6 solr-core
    affected: no fix planned “Out of support scope”
  • Red Hat Fuse 7 camel-solr camel-solr Red Hat Virtualization 4 rhvm-appliance
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

2.02% chance of exploitation in the next 30 days, higher than 81% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 4.0 AV:N/AC:L/Au:S/C:P/I:N/A:N
GitHub 3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected packages

ecosystem package affected fixed in
maven org.apache.solr:solr-parent
>=7.0.0, <7.7.0
<6.6.6
7.7.0
6.6.6
maven org.apache.solr:solr-core
>=7.0.0, <7.7.0
<6.6.6
7.7.0
6.6.6

Affected products

  • Apache Apache Solr

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.