CVE-2022-29063

Name of the Vulnerable Software and Affected Versions Apache OFBiz versions prior to 18.12.06

Description The Solr plugin of Apache OFBiz is configured to automatically make a RMI request on localhost, port 1099 by default. In affected versions, an attacker may exploit this behavior by hosting a malicious RMI server on localhost to run arbitrary code at server start-up or on a server restart.

Recommendations For versions prior to 18.12.06, upgrade to at least version 18.12.06 to resolve the issue. Alternatively, apply the patches available at the specified location.