{"schemaVersion":3,"id":"CVE-2018-8007","aliases":["SUSE-SU-2018:2765-1","UBUNTU-CVE-2018-8007"],"status":"published","duplicateOf":null,"title":null,"description":"Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.","dates":{"published":"2018-07-11T13:00:00.000Z","modified":"2024-09-16T17:04:00.488Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.2,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9,"severity":"high","vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"OSV · Ubuntu","score":7.2,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":3.1,"impact":9.8,"computed":true}]},"epss":{"probability":0.12164,"percentile":0.9612,"severity":"medium","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0.5349999999999994,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.11629},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.11775,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.1135,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.12491,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.12164,"percentile":0.9612}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.1135,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.11629,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.12491,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.12164,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.12164,"percentile":0.9612}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_A557BB5F9D4D83BF","name":"Exploit Reference (mdsec.co.uk)","source":"reference","url":"https://www.mdsec.co.uk/2018/08/advisory-cve-2018-8007-apache-couchdb-remote-code-execution/","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"apache software foundation","product":"apache couchdb","name":"Apache CouchDB","label":"apache couchdb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.7.2","noFixRecorded":false,"fixedIn":null},{"text":"2.0.0 to 2.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.2 | 2.0.0 to 2.1.1","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_couchdb"},{"vendor":"apache","product":"couchdb","name":"CouchDB","label":"couchdb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.7.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 2.0.0, ≤ 2.1.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.7.1 | ≥ 2.0.0, ≤ 2.1.1","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"apache-couchdb","label":"Apache CouchDB","category":"database"}},"hubHref":"/vendor/apache/couchdb"},{"vendor":"ubuntu","product":"couchdb","name":"couchdb","label":"couchdb","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/couchdb","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"suse","product":"couchdb&distro=SUSE OpenStack Cloud Crowbar 8","name":"couchdb","label":"couchdb&distro=SUSE OpenStack Cloud Crowbar 8","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/couchdb&distro=SUSE OpenStack Cloud Crowbar 8","purlType":"rpm","versions":[{"text":"< 1.7.2-3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.2-3.3.1","eol":null,"hubHref":null}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3c1439409216.6221.1531246856676.JavaMail.Joan%40RITA%3e","label":"mail-archives.apache.org/mod_mbox/…","hostname":"mail-archives.apache.org","tags":["Mailing List","X Refsource MLIST"]},{"url":"https://security.gentoo.org/glsa/201812-06","label":"security.gentoo.org/glsa/201812-06","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3C1699016538.6219.1531246785603.JavaMail.Joan%40RITA%3E","label":"mail-archives.apache.org/mod_mbox/…","hostname":"mail-archives.apache.org","tags":["Mailing List","X Refsource MLIST","Third Party Advisory","REPORT"]},{"url":"http://www.securityfocus.com/bid/104741","label":"www.securityfocus.com/bid/104741","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Third Party Advisory"]},{"url":"https://www.mdsec.co.uk/2018/08/advisory-cve-2018-8007-apache-couchdb-remote-code-execution/","label":"www.mdsec.co.uk/2018/08/advisory-cve-2018-8007-apache-couchdb-remote-code-execution/","hostname":"www.mdsec.co.uk","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://blog.couchdb.org/2018/07/10/cve-2018-8007/","label":"blog.couchdb.org/2018/07/10/cve-2018-8007/","hostname":"blog.couchdb.org","tags":["X Refsource CONFIRM","Third Party Advisory","REPORT"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us","label":"support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us","hostname":"support.hpe.com","tags":["X Refsource CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JOUCX7LHDV4YWZDQNXT5NTKKRANZQW/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5FPHVVU5KMRFKQTJPAM3TBGC7LKCWQS/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182765-1/","label":"www.suse.com/support/update/announcement/2018/suse-su-20182765-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1100973","label":"bugzilla.suse.com/1100973","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8007","label":"www.suse.com/security/cve/CVE-2018-8007","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2018-8007","label":"ubuntu.com/security/CVE-2018-8007","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3c1439409216.6221.1531246856676.JavaMail.Joan@RITA%3e","label":"mail-archives.apache.org/mod_mbox/…","hostname":"mail-archives.apache.org","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-8007","label":"www.cve.org/CVERecord?id=CVE-2018-8007","hostname":"www.cve.org","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":["SUSE-SU-2018:2578-1"],"duplicates":[],"related":["SUSE-SU-2018:2578-1"]},"timeline":[{"kind":"published","date":"2018-07-11T13:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T17:04:00.488Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T10:02:07.736Z","stale":false,"partial":false}}