CVE-2022-24706

9.8CRITICAL

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommen

Published: 4/26/2022Updated: 10/28/2025
View on NVDView on MITRE

CISA Known Exploited Vulnerability

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Required Action:

Apply updates per vendor instructions.

Due Date:

2022-09-15

Description

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

AI AnalysisPowered by AI

Affected Products

apachecouchdb

Available Exploits (1)

References