Test ID:	1.3.6.1.4.1.25623.1.0.100762
Category:	Databases
Title:	Apache CouchDB < 0.11.1 CSRF Vulnerability
Summary:	Apache CouchDB is prone to a cross-site request-forgery (CSRF); vulnerability.
Description:	Summary: Apache CouchDB is prone to a cross-site request-forgery (CSRF) vulnerability. Vulnerability Impact: Exploiting this issue may allow a remote attacker to gain unauthorized access to the affected application and perform certain actions in the context of the 'Futon' administration interface. Other attacks are also possible. Affected Software/OS: Apache CouchDB prior to version 0.11.1. Solution: Update to version 0.11.1 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2234 20100817 CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack http://seclists.org/fulldisclosure/2010/Aug/199 http://www.securityfocus.com/archive/1/513174/100/0/threaded 42501 http://www.securityfocus.com/bid/42501 https://bugzilla.redhat.com/show_bug.cgi?id=624764
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.