Non notée
CVE-2022-29063 The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099
Description
The Solr plugin of Apache OFBiz is configured by default to automatically make a RMI request on localhost, port 1099. In version 18.12.05 and earlier, by hosting a malicious RMI server on localhost, an attacker may exploit this behavior, at server start-up or on a server restart, in order to run arbitrary code. Upgrade to at least 18.12.06 or apply patches at https://issues.apache.org/jira/browse/OFBIZ-12646.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache OFBiz 18.12 | premières → 18.12.05 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
- [oss-security] 20220902 Apache OFBiz - Java Deserialization via RMI Connection (CVE-2022-29063) www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache OFBiz
Les 97 CVE de Apache OFBiz →
CVE-2026-66903
Apache OFBiz: Authenticated Path Traversal in Catalog Image Management
Non notée
CVE-2026-71901
Apache OFBiz: Dispatch arbitrary internal services on SFA component
Non notée
CVE-2026-68524
Apache OFBiz: Pre-Authentication Remote Code Execution via Attacker-Controlled Screen Definition Loading
Non notée
CVE-2026-73577
Apache OFBiz: Unauthenticated path-suffix view authorization bypass
Non notée