CVE-2022-24706

9.8CRITICAL

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommen

Veröffentlicht: 4/26/2022Aktualisiert: 10/28/2025
Auf NVD ansehenAuf MITRE ansehen

CISA Bekannte Ausgenutzte Schwachstelle

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Erforderliche Maßnahme:

Apply updates per vendor instructions.

Fälligkeitsdatum:

2022-09-15

Beschreibung

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

KI-AnalyseKI-gestützt

Betroffene Produkte

apachecouchdb

Verfügbare Exploits (1)

Referenzen