Severity: High

Description: The Apache Commons FileUpload library that is included with Apache Solr 4.7.2 and 5.5.5 is vulnerable to remote code execution via deserialization. Apache Solr, which contains the library, is used with SAS Enterprise Case Management. For details about the vulnerability, see CVE-2016-1000031.

Potential Impact: An attacker might execute malicious code on your system.

Solution: Manually replace the affected Apache Commons FileUpload library in the Solr application by following these steps:

1. Download the commons-fileupload-1.3.3.jar file from this location: central.maven.org/maven2/commons-fileupload/commons-fileupload/1.3.3/


2. Save the commons-fileupload-1.3.3.jar file to this directory: solr_installation_directory/server/solr-webapp/webapp/WEB-INF/lib


3. Submit the following command to rename the original JAR file so that it is not loaded:
   mv commons-fileupload-1.3.2.jar commons-fileupload-1.3.2.jar.orig
4. Restart Solr and verify initialization by submitting the following command:
   solr__installation_directory/bin/solr restart

Operating System and Release Information