CVE-2022-24706

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - security@apache.org

Published

2022-04-26

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2022-08-25, action due 2022-09-15: Apply updates per vendor instructions.

Weaknesses

CWE-1188

Affected products

• Couchdb (Apache)
• Apache Couchdb (Apache Software Foundation)

References

• http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html
• http://www.openwall.com/lists/oss-security/2022/04/26/1
• http://www.openwall.com/lists/oss-security/2022/05/09/1
• http://www.openwall.com/lists/oss-security/2022/05/09/2
• http://www.openwall.com/lists/oss-security/2022/05/09/3
• http://www.openwall.com/lists/oss-security/2022/05/09/4
• https://docs.couchdb.org/en/3.2.2/setup/cluster.html
• https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
• https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706