[AMBARI-25482] solr dependence CVE-2019-17558

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.7.5
• Component/s: ambari-infra
• Assignee: Unassigned
• Reporter: Stephen Cooke
• Created: 20/Feb/20 14:34
• Updated: 20/Feb/20 14:34

Description

https://nvd.nist.gov/vuln/detail/CVE-2019-17558

From (including) 5.0.0 Up to (including) 8.3.1

Ambari 2.7.5 (latest ) Infra Solr now uses Solr 7.

 

Can this be addressed.