Home Tools CVE CVE-2022-24706
CRITICAL

CVE-2022-24706

Apache Couchdb 2022-04-26 CVSS v3.1
CVSS
9.8
KEV

Description

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

Summary dbcve.org

Pre-authentication remote admin access on default Apache CouchDB installations prior to version 3.2.2. An unauthenticated attacker can reach the default CouchDB API on a misconfigured/default install and obtain administrative privileges, enabling full control over databases, data, and cluster functions. CVSS 9.8 reflects network-exploitable, low-complexity, no-privileges-required impact on confidentiality, integrity, and availability.

Mitigation

Upgrade Apache CouchDB to 3.2.2 or later, and ensure the installation is not exposed as a default install: configure a non-default admin user/password, enable authentication on all bindings, and place a firewall in front of CouchDB ports (per Apache guidance).

Proof of Concept
Patch Commit

Weakness (CWE)

CWE-1188

EPSS Score

92.51%
Probability of exploitation in next 30 days
99.8th percentile

References

http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry http://www.openwall.com/lists/oss-security/2022/04/26/1 Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2022/05/09/1 Mailing List, Third Party Advisory http://www.openwall.com/lists/oss-security/2022/05/09/2 Mailing List, Patch, Third Party Advisory http://www.openwall.com/lists/oss-security/2022/05/09/3 Mailing List, Patch, Third Party Advisory http://www.openwall.com/lists/oss-security/2022/05/09/4 Mailing List, Patch, Third Party Advisory https://docs.couchdb.org/en/3.2.2/setup/cluster.html Broken Link, Product https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00 Mailing List, Vendor Advisory https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd Exploit, Third Party Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706 US Government Resource
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE