{"id":"CVE-2022-24706","aliases":["BIT-couchdb-2022-24706","EUVD-2022-29572","GHSA-vxc9-8m8h-9cp6","MGASA-2022-0466"],"status":"published","title":"Remote Code Execution Vulnerability in Packaging","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.9251,"percentile":0.99828,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-1188"],"published":"2022-04-26T00:00:00Z","modified":"2026-10-28T02:31:08Z","kev":{"date_added":"2022-08-25","due_date":"2022-09-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-08-25"},{"source":"kev","since":"2022-08-25"}],"exploits":[{"source":"metasploit","id":"exploit/multi/http/apache_couchdb_erlang_rce","title":"Apache Couchdb Erlang RCE","type":"exploit","platform":"Linux,Unix,Windows","date":"2022-01-21","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/multi/http/apache_couchdb_erlang_rce"},{"source":"exploitdb","id":"EDB-50914","title":"Apache CouchDB 3.2.1 - Remote Code Execution (RCE)","type":"remote","platform":"linux","date":"2022-05-11","url":"https://www.exploit-db.com/exploits/50914"},{"source":"pocgithub","id":"sadshade/CVE-2022-24706-CouchDB-Exploit","title":"sadshade/CVE-2022-24706-CouchDB-Exploit","date":"2022-05-20","url":"https://github.com/sadshade/CVE-2022-24706-CouchDB-Exploit"},{"source":"pocgithub","id":"ahmetsabrimert/Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-","title":"ahmetsabrimert/Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-","date":"2022-06-14","url":"https://github.com/ahmetsabrimert/Apache-CouchDB-CVE-2022-24706-RCE-Exploits-Blog-post-"},{"source":"pocgithub","id":"superzerosec/CVE-2022-24706","title":"superzerosec/CVE-2022-24706","date":"2022-07-04","url":"https://github.com/superzerosec/CVE-2022-24706"},{"source":"pocgithub","id":"becrevex/CVE-2022-24706","title":"becrevex/CVE-2022-24706","date":"2024-10-08","url":"https://github.com/becrevex/CVE-2022-24706"},{"source":"pocgithub","id":"junghyeonkum/CVE-2022-24706","title":"junghyeonkum/CVE-2022-24706","date":"2026-07-08","url":"https://github.com/junghyeonkum/CVE-2022-24706"},{"source":"nuclei","id":"CVE-2022-24706","title":"CouchDB Erlang Distribution - Remote Command Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-24706.yaml"}],"fixes":[{"ecosystem":"Bitnami","package":"couchdb","fixed_in":["3.2.2"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"couchdb","fixed_in":["3.2.2-1.mga8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Bitnami","package":"couchdb","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.2.2"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"couchdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-1.mga8"}]}]}],"products":[{"vendor":"apache","product":"couchdb"},{"vendor":"apache software foundation","product":"apache couchdb"}],"references":[{"url":"https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00","tags":["x_transferred","Mailing List","Vendor Advisory","advisory","web"]},{"url":"https://docs.couchdb.org/en/3.2.2/setup/cluster.html","tags":["x_transferred","Broken Link","Product","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/04/26/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/1","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/3","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/4","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/2","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","advisory","article"]},{"url":"http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd","tags":["x_transferred","Exploit","Third Party Advisory","advisory","web"]},{"url":"http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html","tags":["x_transferred","Exploit","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706","tags":["government-resource","US Government Resource","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24706","tags":["web","advisory"]},{"url":"https://medium.com/@_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd"},{"url":"https://github.com/advisories/GHSA-vxc9-8m8h-9cp6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24706.json","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0466.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30342","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/04/26/1","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-24706","title":"Remote Code Execution Vulnerability in Packaging","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","status":"published","published":"2022-04-26T00:00:00Z","modified":"2025-10-21T23:15:40.735Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:34:34.940806Z"}],"euvd":[{"id":"EUVD-2022-29572","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","status":"published","published":"2022-04-26T00:00:00Z","modified":"2025-10-21T23:15:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-08-25","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-vxc9-8m8h-9cp6","title":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default...","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","status":"published","published":"2022-04-27T00:00:21Z","modified":"2025-10-22T00:32:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T15:04:05.954742Z"}],"kev":[{"id":"CVE-2022-24706","title":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","description":"Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.","cwes":["CWE-1188"],"kev":{"date_added":"2022-08-25","due_date":"2022-09-15","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2022-24706","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","status":"published","published":"2022-04-26T10:15:35.083Z","modified":"2026-06-17T04:32:20.16Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T14:07:18.660414Z"}],"osv":[{"id":"CVE-2022-24706","title":"Remote Code Execution Vulnerability in Packaging","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","status":"published","published":"2022-04-26T00:00:00Z","modified":"2026-10-28T02:31:08.384599219Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-1188"],"updated_at":"2026-11-02T15:44:24.428403Z"},{"id":"BIT-couchdb-2022-24706","title":"Remote Code Execution Vulnerability in Packaging","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","status":"published","published":"2024-03-06T10:51:24.067Z","modified":"2026-09-08T08:46:04.125908461Z","updated_at":"2026-11-02T15:28:28.70813Z"},{"id":"MGASA-2022-0466","title":"Updated couchdb packages fix security vulnerability","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly\nsecured default installation without authenticating and gain admin\nprivileges. The CouchDB documentation has always made recommendations for\nproperly securing an installation, including recommending using a firewall\nin front of all CouchDB installations. (CVE-2022-24706)\n","status":"published","published":"2022-12-17T18:48:08Z","modified":"2026-04-16T04:43:23.600374771Z","updated_at":"2026-11-02T15:49:42.263076Z"}]}}