Lucene search

[email protected]CVE-2018-8007

HistoryJul 11, 2018 - 1:29 p.m.

CVE-2018-8007

2018-07-1113:29:00

CWE-20

[email protected]

web.nvd.nist.gov

cve

2018

8007

apache

couchdb

security

http

api

privilege escalation

remote code execution

cve-2017-12636

nvd

9 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.031 Low

EPSS

Percentile

91.2%

JSON

Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system’s user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.

Affected configurations

Vulners

NVD

Node

apachecouchdbRange2.0.0–2.1.1

CPENameOperatorVersion
apache:couchdbapache couchdble1.7.1
apache:couchdbapache couchdble2.1.1

CPE	Name	Operator	Version
apache:couchdb	apache couchdb	le	1.7.1
apache:couchdb	apache couchdb	le	2.1.1

CNA Affected

[
  {
    "product": "Apache CouchDB",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.7.2"
      },
      {
        "status": "affected",
        "version": "2.0.0 to 2.1.1"
      }
    ]
  }
]