high7.5
CVE-2017-9325
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
Impact
The provided secure solrconfig.xml sample configuration does not enforce Sentry authorization on /update/json/docs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudera | Cdh | through 5.8.0 from 5.8.2 through 5.9.2 from 5.10.0 through 5.10.1 from 5.11.0 through 5.11.1 |