BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2022-24706Remote Code Execution Vulnerability in Packaging

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

9.8 CRITICALEPSS 92.51%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C

CISA required action

⚡ Known exploited · remediation due Sep 15, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2022-24706
Status
Analyzed
Assigner (CNA)
apache
Published
Apr 26, 2022
Last modified
2026-06-17 04:32 UTC
Weaknesses
  • CWE-1188 · Insecure Default Initialization of Resource

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:55 UTC.