CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
60
CVE-2022-24706
Apache CouchDB Insecure Default Initialization of Resource Vulnerability
- CVSS 3.1
- 9.8 critical
- EPSS
- 93%p100
- Published
- ·
- Added to KEV
Description · NVD
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
KEVCISA Known Exploited Vulnerability
- Affected
- Apache CouchDB
- Required action
- Apply updates per vendor instructions.
- Due date
- Ransomware use
- Unknown
In the news
2 storiesCISA adds 10 flaws to its Known Exploited Vulnerabilities Catalog
60