Remote Code Execution Vulnerability in Packaging
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-24706US | critical9.8OT critical | KEV | ||
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has… | ||||
02
references
External citations — patches, advisories, analysis.
- http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.htmlADVISORY
- http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.htmlADVISORY
- http://www.openwall.com/lists/oss-security/2022/04/26/1ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/1ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/2ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/3ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/4ADVISORY
- https://docs.couchdb.org/en/3.2.2/setup/cluster.htmlWEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan