CVE Intelligence

Apache Software Foundation Apache CouchDB vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Apache CouchDB: 1 record(s), with affected versions and fixes.

CVE-2022-24706 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-1188 Apr 26, 2022
Apache CouchDB Insecure Default Initialization of Resource Vulnerability
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.