Detections
Analytics

SCA: security update for github.com/apache/solr-operator (GHSA-g9qx-25vj-rf53)

medium Tenable Self-Hosted Container Security Plugin ID 415037

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Insertion of Sensitive Information into Log File vulnerability in the Apache Solr Operator. This issue
 affects all versions of the Apache Solr Operator from 0.3.0 through 0.8.0. When asked to bootstrap Solr
 security, the operator will enable basic authentication and create several accounts for accessing Solr:
 including the "solr" and "admin" accounts for use by end-users, and a "k8s-oper" account which the
 operator uses for its own requests to Solr. One common source of these operator requests is healthchecks:
 liveness, readiness, and startup probes are all used to determine Solr's health and ability to receive
 traffic. By default, the operator configures the Solr APIs used for these probes to be exempt from
 authentication, but users may specifically request that authentication be required on probe endpoints as
 well. Whenever one of these probes would fail, if authentication was in use, the Solr Operator would
 create a Kubernetes "event" containing the username and password of the "k8s-oper" account. Within the
 affected version range, this vulnerability affects any solrcloud resource which (1) bootstrapped security
 through use of the `.solrOptions.security.authenticationType=basic` option, and (2) required
 authentication be used on probes by setting `.solrOptions.security.probesRequireAuth=true`. Users are
 recommended to upgrade to Solr Operator version 0.8.1, which fixes this issue by ensuring that probes no
 longer print the credentials used for Solr requests. Users may also mitigate the vulnerability by
 disabling authentication on their healthcheck probes using the setting
 `.solrOptions.security.probesRequireAuth=false`. (CVE-2024-31391)

See Also

https://github.com/advisories/GHSA-g9qx-25vj-rf53

Plugin Details

Severity: Medium

ID: 415037

Version: Revision 1.13

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.91

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:N/A:N

CVSS Score Source: CVE-2024-31391

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 5.7

Threat Score: 1.9

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 4/12/2024

Vulnerability Publication Date: 4/12/2024

Reference Information

CVE: CVE-2024-31391

cwe: CWE-532