CVE Feed

    Dashboard / CVE / CVE-2022-24706

    CVE-2022-24706

    In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

    Published:Apr 26, 2022
    Last Modified:Oct 28, 2025
    EPS:Apr 26, 2022
    EPSS Score:0.94392
    CVSS Score:9.8

    CISA Notification

    Description

    In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Sep 15, 2022
    1457 days ago
    Alert Date
    Aug 25, 2022
    1478 days ago

    Affected Products

    Vendor
    Apache
    Product
    Couchdb

    Exploits

    http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.htmlhttps://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcdhttp://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.htmlhttps://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcdhttps://www.exploit-db.com/exploits/50914https://github.com/ahmetsabrimert/Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-https://github.com/becrevex/CVE-2022-24706https://github.com/junghyeonkum/CVE-2022-24706https://github.com/sadshade/CVE-2022-24706-CouchDB-Exploithttps://github.com/superzerosec/CVE-2022-24706

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2023-45725 (CVSS 5.7) — Design document functions which receive a user http request object may expose authorization or session cookie …
    CVE-2023-26268 (CVSS 4.4) — Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascrip…
    CVE-2021-38295 (CVSS 7.3) — In Apache CouchDB, a malicious user with permission to create documents in a database is able to attach a HTML…
    CVE-2020-1955 (CVSS 9.8) — CouchDB version 3.0.0 shipped with a new configuration setting that governs access control to the entire datab…
    CVE-2018-17188 (CVSS 7.2) — Prior to CouchDB version 2.3.0, CouchDB allowed for runtime-configuration of key components of the database. I…
    CVE-2018-14889 (CVSS 7.8) — CouchDB in Vectra Networks Cognito Brain and Sensor before 4.3 contains a local code execution vulnerability.…
    CVE-2018-11769 (CVSS 7.2) — CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S). Due to insufficient v…
    CVE-2018-8007 (CVSS 7.2) — Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validat…
    CVE-2016-8742 (CVSS 7.8) — The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All …
    CVE-2017-12635 (CVSS 9.8) — Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache …

    References

    http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html
    http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html
    http://www.openwall.com/lists/oss-security/2022/04/26/1
    http://www.openwall.com/lists/oss-security/2022/05/09/1
    http://www.openwall.com/lists/oss-security/2022/05/09/2
    http://www.openwall.com/lists/oss-security/2022/05/09/3
    http://www.openwall.com/lists/oss-security/2022/05/09/4
    https://docs.couchdb.org/en/3.2.2/setup/cluster.html
    https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
    https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd
    http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html
    http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html
    http://www.openwall.com/lists/oss-security/2022/04/26/1
    http://www.openwall.com/lists/oss-security/2022/05/09/1
    http://www.openwall.com/lists/oss-security/2022/05/09/2
    http://www.openwall.com/lists/oss-security/2022/05/09/3
    http://www.openwall.com/lists/oss-security/2022/05/09/4
    https://docs.couchdb.org/en/3.2.2/setup/cluster.html
    https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
    https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High