cve.bz

CVE-2022-24706

9.8 criticalKEVEPSS 93%

Critical (9.8) in Apache CouchDB. In CISA KEV since 2022-08-25. EPSS 93% chance of exploitation in the next 30 days.

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
93% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
CISA KEV
listed 2022-08-25, due 2022-09-15
CWE
CWE-1188
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON