CVE-2022-24706

9.8CRITICAL

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommen

게시됨: 4/26/2022업데이트됨: 10/28/2025
NVD에서 보기MITRE에서 보기

CISA 알려진 악용 취약점

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

필요한 조치:

Apply updates per vendor instructions.

마감일:

2022-09-15

설명

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

AI 분석AI 기반

영향받는 제품

apachecouchdb

사용 가능한 익스플로잇 (1)

참조