Apache CouchDB Insecure Default Initialization of Resource Vulnerability

Added Aug. 25, 2022 • Due Sept. 15, 2022 • CVE-2022-24706

Overdue Apache / CouchDB CWE-1188

Description

Apache CouchDB contains an insecure default initialization of resource vulnerability which can allow an attacker to escalate to administrative privileges.

Required Action

Apply updates per vendor instructions.

References

https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00
https://nvd.nist.gov/vuln/detail/CVE-2022-24706

Additional Information

Catalog Version: 2025.01.24
Catalog Released: Jan. 24, 2025
Days Until Due: 0 days
Last Updated: 6 months ago