Apache Solr Log4Shell RCE

Description

Due to vulnerabilities in Log4j library used by Apache Solr, an unauthenticated attacker can leak sensitive information or execute arbitrary code on the system.

Remediation

Upgrade to the latest version of Apache Solr

References

Related Vulnerabilities

Severity

High

Classification

CVE-2021-44228 CWE-78 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Acumonitor