Remote Code Execution Vulnerability in Packaging
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-24706US | critical9.8OT kritisch | KEV | ||
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.htmlADVISORY
- http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.htmlADVISORY
- http://www.openwall.com/lists/oss-security/2022/04/26/1ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/1ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/2ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/3ADVISORY
- http://www.openwall.com/lists/oss-security/2022/05/09/4ADVISORY
- https://docs.couchdb.org/en/3.2.2/setup/cluster.htmlWEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan