| ID | 48559 |
| Created | Nov 28, 2019 |
| Updated | Sep 23, 2020 |
| Severity |
|
| CVE ID | CVE-2019-17558 |
| EPSS | 97.53% |
| Coverage |
IPS (Regular DB)
IPS (Extended DB)
|
| Default Action | drop |
| Active |
|
| Affected OS | Windows, Linux |
| Affected App | Apache |
Legend
| Active/Available |
|
| InActive/Not Available |
|
Database Update History
| Date | Version | Detail |
|---|---|---|
| 2019-12-13 | 15.744 | Default_action:pass:drop |
| 2019-11-28 | 15.735 |
Refine Search
Threat Encyclopedia
Apache.Solr.Velocity.Template.Remote.Code.Execution
Description
This indicates an attack attempt to exploit an Remote Code Execution Vulnerability in Apache Software Foundation Solr.
A remote, unauthenticated attacker can exploit this vulnerability by sending crafted HTTP requests. Successful exploitation could result in arbitrary code execution in the context of the server application.
Affected Products
Apache Software Foundation Solr 7.7.2 to 8.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lucene.apache.org/solr/news.html
