UpHeron
All vulnerabilities

Servers and applications

CVE-2017-9803

Apache Solr's Kerberos plugin can be configured to use delegation tokens, which allows an application to reuse the authentication of an end-user or another application. There are two issues with this functionality (when using SecurityAwareZkACLProvider type of ACL provider e.g. SaslZkACLProvider). Firstly, access to the security configuration can be leaked to users other than the solr super…

Severity
High 7.5
Published
18 Sept 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2.2% in the next 30 daysHigher than 82% of CVEs. EPSS by FIRST, 11 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache SolrServers and applications · cpe:a:apache:solr
  • Version 6.6.0
  • Version 6.5.1
  • Version 6.5.0
  • Version 6.4.2
All 9 release lines
  • Version 6.2.0
  • Version 6.2.1
  • Version 6.3.0
  • Version 6.4.0
  • Version 6.4.1
  • Version 6.4.2
  • Version 6.5.0
  • Version 6.5.1
  • Version 6.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-9803
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-9803