Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2022-24706
Description:In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
Test IDs: 1.3.6.1.4.1.25623.1.0.148036   1.3.6.1.4.1.25623.1.1.10.2022.0466   1.3.6.1.4.1.25623.1.0.148869   1.3.6.1.4.1.25623.1.0.148035  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-24706
http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html
http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html
https://medium.com/@_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd
https://docs.couchdb.org/en/3.2.2/setup/cluster.html
https://docs.couchdb.org/en/3.2.2/setup/cluster.html
https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
http://www.openwall.com/lists/oss-security/2022/04/26/1
http://www.openwall.com/lists/oss-security/2022/05/09/1
http://www.openwall.com/lists/oss-security/2022/05/09/2
http://www.openwall.com/lists/oss-security/2022/05/09/3
http://www.openwall.com/lists/oss-security/2022/05/09/4




© 1998-2025 E-Soft Inc. All rights reserved.