Test ID:	1.3.6.1.4.1.25623.1.0.903508
Category:	Web application abuses
Title:	Apache Solr Directory Traversal Vulnerability (SOLR-4882, SOLR-5520) - Linux
Summary:	Apache Solr is prone to a directory traversal vulnerability.
Description:	Summary: Apache Solr is prone to a directory traversal vulnerability. Vulnerability Insight: The flaw is due to improper verification of resource paths passed to certain Solr REST services within the 'SolrResourceLoader' class. Vulnerability Impact: Successful exploitation will allow remote attackers to gain potentially sensitive information. Affected Software/OS: Apache Solr versions before 3.6.3 and 4.x before 4.6.0. Solution: Update to version 3.6.3, 4.6.0 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-6397 55730 http://secunia.com/advisories/55730 59372 http://secunia.com/advisories/59372 63935 http://www.securityfocus.com/bid/63935 RHSA-2013:1844 http://rhn.redhat.com/errata/RHSA-2013-1844.html RHSA-2014:0029 http://rhn.redhat.com/errata/RHSA-2014-0029.html [oss-security] 20131126 Re: CVE request: Apache Solr 4.6.0 http://www.openwall.com/lists/oss-security/2013/11/27/1 http://lucene.apache.org/solr/4_6_0/changes/Changes.html http://www.agarri.fr/kom/archives/2013/11/27/compromising_an_unreachable_solr_server_with_cve-2013-6397/index.html https://issues.apache.org/jira/browse/SOLR-4882
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.