Description
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Apache Software Foundation Apache CouchDB
Apache CouchDB to ≤ 3.2.1affected
References
- https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00 ↗
- https://docs.couchdb.org/en/3.2.2/setup/cluster.html ↗
- http://www.openwall.com/lists/oss-security/2022/04/26/1 ↗
- http://www.openwall.com/lists/oss-security/2022/05/09/1 ↗
- http://www.openwall.com/lists/oss-security/2022/05/09/3 ↗
- http://www.openwall.com/lists/oss-security/2022/05/09/4 ↗
- http://www.openwall.com/lists/oss-security/2022/05/09/2 ↗
- http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html ↗
- https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd ↗
- http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706 ↗