When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts.
{ "cpes": [ "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*" ], "severity": "Critical" }