Apache CouchDB Insecure Default Initialization of Resource Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/08/2022. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| couchdb | < 3.2.2 | 3.2.2 |
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free