Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-24706
9.8
CRITICALCVSS v3
Published
April 26, 2022
CVSS v2
10 HIGH
Affected
2 projects
Assigned by
Apache
Severity scale
010
Description
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
apache/couchdb
Docker HubUnofficial convenience binaries for CouchDB, the RESTful document-oriented database
Docker HubUnofficial convenience binaries for CouchDB, the RESTful document-oriented database< 3.2.2NVD
apache/couchdb
GitHubSeamless multi-primary syncing database with an intuitive HTTP/JSON API, designed for reliability
GitHubSeamless multi-primary syncing database with an intuitive HTTP/JSON API, designed for reliability< 3.2.2NVD