https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T05:46:39.908764+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-29262 CVE-2021-29262 — Misapplied Zookeeper ACLs can result in leakage of configured authentication and authorization settings 2026-10-10T05:46:39.910513+00:00

Affected: Apache Software Foundation Apache Solr

When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs.