CVE-2023-26268 Apache CouchDB, IBM Cloudant: Information sharing via couchjs processes

2023-05-0220:06:09

CWE-200

apache

www.cve.org

cve-2023-26268

apache couchdb

ibm cloudant

information sharing

design documents

javascript environment

upgrade

workaround

4.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.8%

JSON

Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document functions:

validate_doc_update
list
filter
filter views (using view functions as filters)
rewrite
update

This doesn’t affect map/reduce or search (Dreyfus) index functions.

Users are recommended to upgrade to a version that is no longer affected by this issue (Apache CouchDB 3.3.2 or 3.2.3).

Workaround: Avoid using design documents from untrusted sources which may attempt to cache or store data in the Javascript environment.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "Apache CouchDB",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "3.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "IBM Cloudant",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "8349",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]