Stay Secure with the Latest Linux Advisories

security advisorysecurity issuecritical

Mageia: 2022-0466 Critical Advisory: CouchDB Admin Access Risk

In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations. (CVE-2022-24706) . MGASA-2022-0466 - Updated couchdb packages fix security vulnerability Publication date: 17 Dec 2022 URL: https://advisories.mageia.org/MGASA-2022-0466.html Type: security Affected Mageia releases: 8 CVE: CVE-2022-24706 In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations. (CVE-2022-24706) References: - https://bugs.mageia.org/show_bug.cgi?id=30342 - https://www.openwall.com/lists/oss-security/2022/04/26/1 - https://www.cve.org/CVERecord?id=CVE-2022-24706 SRPMS: - 8/core/couchdb-3.2.2-1.mga8 . A patch has been issued for CouchDB to fix a significant vulnerability that permitted unauthorized administrative entry prior to version 3.2.2.. CouchDB Security Update, Mageia 2022-0466, Apache CouchDB Issues, Admin Access Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Dec 17, 2022 •Critical Mageia