{"schemaVersion":3,"id":"CVE-2022-24706","aliases":["MGASA-2022-0466"],"status":"published","duplicateOf":null,"title":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","description":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.","dates":{"published":"2022-04-26T00:00:00.000Z","modified":"2025-10-21T23:15:40.735Z","reserved":null,"kevAdded":["2022-08-25T00:00:00.000Z"],"kevDue":["2022-09-15T00:00:00.000Z"]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.9251,"percentile":0.99828,"severity":"critical","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.9251},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.9251,"percentile":0.99828}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.9251,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.9251,"percentile":0.99828}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-08-25T00:00:00.000Z","dueDate":"2022-09-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","description":"Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.","notes":[{"type":"url","href":"https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00","label":"lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2022-24706","label":"nvd.nist.gov/vuln/detail/CVE-2022-24706"}],"vendor":"Apache","product":"CouchDB","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2022-08-25T00:00:00.000Z","dueDate":"2022-09-15T00:00:00.000Z","requiredAction":"Apply updates per vendor instructions.","name":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","description":"Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.","notes":[{"type":"url","href":"https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00","label":"lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2022-24706","label":"nvd.nist.gov/vuln/detail/CVE-2022-24706"}],"vendor":"Apache","product":"CouchDB","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_668671083AA8153A","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_80F5D27C11465E22","name":"Exploit Reference (medium.com)","source":"reference","url":"https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_9F334A18008EB3F4","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"50914","name":"Apache CouchDB 3.2.1 - Remote Code Execution (RCE)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/50914","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"remote","platform":"linux","file":"exploits/linux/remote/50914.py","codes":["CVE-2022-24706"]},"metasploit":null},{"id":"MSF_EXPLOIT_MULTI_HTTP_APACHE_COUCHDB_ERLANG_RCE","name":"Apache Couchdb Erlang RCE","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/multi/http/apache_couchdb_erlang_rce.rb","maturity":"weaponized","reliabilityScore":1,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/multi/http/apache_couchdb_erlang_rce","rank":"600","rankName":"excellent","postAuth":false,"check":true,"stability":["crash-safe"],"sideEffects":["ioc-in-logs","artifacts-on-disk"],"reliability":["repeatable-session"]}}],"exploitCount":5,"weaknesses":[{"id":"CWE-1188","name":"Initialization of a Resource with an Insecure Default","description":"The product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1188.html"}],"affected":[{"vendor":"apache software foundation","product":"apache couchdb","name":"Apache CouchDB","label":"apache couchdb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ Apache CouchDB, ≤ 3.2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ Apache CouchDB, ≤ 3.2.1","eol":null,"hubHref":"/vendor/apache_software_foundation/apache_couchdb"},{"vendor":"apache","product":"couchdb","name":"CouchDB","label":"couchdb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.2","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"apache-couchdb","label":"Apache CouchDB","category":"database"}},"hubHref":"/vendor/apache/couchdb"},{"vendor":"mageia","product":"couchdb","name":"couchdb","label":"couchdb","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/couchdb","purlType":"rpm","versions":[{"text":"< 3.2.2-1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.2-1.mga8","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00","label":"lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00","hostname":"lists.apache.org","tags":["Mailing List","Vendor Advisory"]},{"url":"https://docs.couchdb.org/en/3.2.2/setup/cluster.html","label":"docs.couchdb.org/en/3.2.2/setup/cluster.html","hostname":"docs.couchdb.org","tags":["Broken Link","Product"]},{"url":"http://www.openwall.com/lists/oss-security/2022/04/26/1","label":"www.openwall.com/lists/oss-security/2022/04/26/1","hostname":"www.openwall.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/1","label":"www.openwall.com/lists/oss-security/2022/05/09/1","hostname":"www.openwall.com","tags":["Mailing List","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/3","label":"www.openwall.com/lists/oss-security/2022/05/09/3","hostname":"www.openwall.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/4","label":"www.openwall.com/lists/oss-security/2022/05/09/4","hostname":"www.openwall.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/05/09/2","label":"www.openwall.com/lists/oss-security/2022/05/09/2","hostname":"www.openwall.com","tags":["Mailing List","Patch","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html","label":"packetstormsecurity.com/files/167032/Apache-CouchDB-3.2.1-Remote-Code-Execution.html","hostname":"packetstormsecurity.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd","label":"medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd","hostname":"medium.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html","label":"packetstormsecurity.com/files/169702/Apache-CouchDB-Erlang-Remote-Code-Execution.html","hostname":"packetstormsecurity.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24706","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://advisories.mageia.org/MGASA-2022-0466.html","label":"advisories.mageia.org/MGASA-2022-0466.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30342","label":"bugs.mageia.org/show_bug.cgi?id=30342","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://www.openwall.com/lists/oss-security/2022/04/26/1","label":"www.openwall.com/lists/oss-security/2022/04/26/1","hostname":"www.openwall.com","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2022-04-26T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2022-08-25T00:00:00.000Z","label":"Added to CISA KEV","detail":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2022-09-15T00:00:00.000Z","label":"CISA remediation due","detail":"Apply updates per vendor instructions.","source":"cisa"},{"kind":"modified","date":"2025-10-21T23:15:40.735Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:48:00.248Z","stale":false,"partial":false}}