Apache Solr < 6.6.1 Kerberos 插件授权标记处理远程信息泄露

high Nessus 插件 ID 103504

版本 1.6

Nov 21, 2025, 2:12 PM

  • CVSS metrics ("CVSSv3 score" set to 7.5)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H")
  • CVSS temporal metrics ("CVSSv3 temporal score" set to none)
  • CVSSv3 score source (changed from "manual" to none)
  • Exploit attributes ("Exploit available" set to "True")

Plugin Feed: 202511211412

版本 1.5

Feb 18, 2025, 11:54 PM

  • Plugin metadata (CVSS 3 Change AC:H --> AC:L where needed)

Plugin Feed: 202502182354

* Changelogs are generally available for changes made after Nov 1, 2022