Security Advisory

CVE-2022-24706

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-26 00:00:00
Last updated 2025-10-21 23:15:40
Assigner apache
State PUBLISHED

Description

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.