CVE-2022-24706 — Apache CouchDB Insecure Default Initialization of Resource Vulnerability

provenance: imported · CVE: CVE-2022-24706

CVE-2022-24706: Apache CouchDB Insecure Default Initialization of Resource Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	Apache
Product	CouchDB
Date added	2022-08-25
Due date	2022-09-15
Ransomware campaign use	Unknown

Description

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00; https://nvd.nist.gov/vuln/detail/CVE-2022-24706

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-24706
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog