CVE-2022-24706criticalunder attackCWE-1188

CVE-2022-24706: critical vulnerability in Apache CouchDB

Remote Code Execution Vulnerability in Packaging

Published · Updated

Follow this CVE+ Monitor Apache CouchDB

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 93%
from disclosure to weapon15 days
Published on NVDApr 26
1st PoC+15d
metasploitJan 21
CISA KEV+121d
Action required by CISAfederal deadline: 2022-09-15

Apply updates per vendor instructions.

In short

Apache CouchDB before version 3.2.2 allows anyone to access an unsecured default installation without a password and become an administrator. This is dangerous because attackers can then control the entire database system.

Technical detail

Unauthenticated remote attackers can exploit improper default configuration in CouchDB <3.2.2 to gain administrative privileges through direct access to the exposed API endpoint. Prerequisite: default installation without proper firewall or authentication mechanisms enabled. Impact includes complete database compromise, data theft, manipulation, and deletion.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Apache Software Foundation · Apache CouchDB
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Apache CouchDB

In the same product, most dangerous first.

CVE-2017-12635—CVE-2017-12635EPSS 99.8%CVE-2017-12636—CVE-2017-12636EPSS 90.6%CVE-2018-8007—CVE-2018-8007EPSS 12.2%CVE-2018-11769—CVE-2018-11769EPSS 8.4%CVE-2021-38295—Privilege escalation vulnerability when using HTML attachmentsEPSS 3.7%CVE-2018-17188—CVE-2018-17188EPSS 3.6%