ID de Prueba:	1.3.6.1.4.1.25623.1.0.146931
Categoría:	Databases
Título:	Apache CouchDB <= 3.1.1 Privilege Escalation Vulnerability - Windows
Resumen:	Apache CouchDB is prone to a privilege escalation vulnerability.
Descripción:	Summary: Apache CouchDB is prone to a privilege escalation vulnerability. Vulnerability Insight: A malicious user with permission to create documents in a database is able to attach a HTML attachment to a document. If a CouchDB admin opens that attachment in a browser, e.g. via the CouchDB admin interface Fauxton, any JavaScript code embedded in that HTML attachment will be executed within the security context of that admin. A similar route is available with the already deprecated _show and _list functionality. Vulnerability Impact: This privilege escalation vulnerability allows an attacker to add or remove data in any database or make configuration changes. Affected Software/OS: Apache CouchDB version 3.1.1 and prior. Solution: Update to version 3.1.2, 3.2.0 or later. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2021-38295 https://docs.couchdb.org/en/stable/cve/2021-38295.html
Copyright	Copyright (C) 2021 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.