Critical severity · published Apr 26, 2022
CVE-2022-24706
Remote Code Execution Vulnerability in Packaging
In wildKEV
9.8
CVSS
92.5%
EPSS
Yes
On KEV
Description
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)92.5% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Aug 25, 2022
Federal remediation dueSep 15, 2022
Ransomware campaign useNot known
Affected products
Which versions
AC
Apache CouchDB · Apache Software Foundation
Apache CouchDB through 3.2.1 · source: vendor
CO
Couchdb · Apache
before 3.2.2 · source: NVD, KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-24706
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-24706
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
lists.apache.org
https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
docs.couchdb.org
https://docs.couchdb.org/en/3.2.2/setup/cluster.html
mailing-list
http://www.openwall.com/lists/oss-security/2022/04/26/1
mailing-list
http://www.openwall.com/lists/oss-security/2022/05/09/1
mailing-list
http://www.openwall.com/lists/oss-security/2022/05/09/3
mailing-list
http://www.openwall.com/lists/oss-security/2022/05/09/4
More from Apache CouchDB
9.3
CVE-2026-86471
Apache CouchDB: Admin credentials leading to code execution as operating system user
8.1
CVE-2026-90800
Apache CouchDB: Auth bypass in prefixed _users and _replicator databases
7.7
CVE-2026-90797
Apache CouchDB: Pre-authentication gzip decompression bomb via POST /_session
7.2
CVE-2018-11769
CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S)
6.0
CVE-2026-107755
Apache CouchDB: Credential Disclosure to Non-Owner Members via Object-Form Replication Endpoint URLs