CVE-2022-24706 — Remote Code Execution Vulnerability in Packaging
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation h…
Published: 2022-04-26 · CVSS: 9.8 · CVSS 3.1
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7