CVE-2022-24706

KEV

Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Vendor / Project: Apache
Product: CouchDB
Date added: Aug 25, 2022
Due date: Sep 15, 2022
Known ransomware use: Unknown
CWEs: CWE-1188

Description

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Required action

Apply updates per vendor instructions.

Notes

https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
https://nvd.nist.gov/vuln/detail/CVE-2022-24706