Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2022-24706

Опубликовано: 26 апр. 2022
Источник: ubuntu
Приоритет: medium
CVSS2: 10
CVSS3: 9.8

Описание

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

РелизСтатусПримечание
upstream

needs-triage

Показывать по

10 Critical

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

CVSS3: 9.8
debian
почти 4 года назад

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly ...

CVSS3: 9.8
github
почти 4 года назад

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

CVSS3: 9.8
fstec
почти 4 года назад

Уязвимость системы управления базами данных CouchDB, связанная с небезопасной инициализацией ресурса, позволяющая нарушителю повысить свои привилегии

10 Critical

CVSS2

9.8 Critical

CVSS3