Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-12636

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.935
EPSS Ranking 99.8%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 9.0
References
Products affected by CVE-2017-12636
  • Apache » Couchdb » Version: N/A
    cpe:2.3:a:apache:couchdb:-
  • Apache » Couchdb » Version: 0.10.0
    cpe:2.3:a:apache:couchdb:0.10.0
  • Apache » Couchdb » Version: 0.10.1
    cpe:2.3:a:apache:couchdb:0.10.1
  • Apache » Couchdb » Version: 0.10.2
    cpe:2.3:a:apache:couchdb:0.10.2
  • Apache » Couchdb » Version: 0.11.0
    cpe:2.3:a:apache:couchdb:0.11.0
  • Apache » Couchdb » Version: 0.11.1
    cpe:2.3:a:apache:couchdb:0.11.1
  • Apache » Couchdb » Version: 0.11.2
    cpe:2.3:a:apache:couchdb:0.11.2
  • Apache » Couchdb » Version: 0.8.0
    cpe:2.3:a:apache:couchdb:0.8.0
  • Apache » Couchdb » Version: 0.8.1
    cpe:2.3:a:apache:couchdb:0.8.1
  • Apache » Couchdb » Version: 0.9.0
    cpe:2.3:a:apache:couchdb:0.9.0
  • Apache » Couchdb » Version: 0.9.1
    cpe:2.3:a:apache:couchdb:0.9.1
  • Apache » Couchdb » Version: 0.9.2
    cpe:2.3:a:apache:couchdb:0.9.2
  • Apache » Couchdb » Version: 1.0.0
    cpe:2.3:a:apache:couchdb:1.0.0
  • Apache » Couchdb » Version: 1.0.1
    cpe:2.3:a:apache:couchdb:1.0.1
  • Apache » Couchdb » Version: 1.0.2
    cpe:2.3:a:apache:couchdb:1.0.2
  • Apache » Couchdb » Version: 1.0.3
    cpe:2.3:a:apache:couchdb:1.0.3
  • Apache » Couchdb » Version: 1.0.4
    cpe:2.3:a:apache:couchdb:1.0.4
  • Apache » Couchdb » Version: 1.1.0
    cpe:2.3:a:apache:couchdb:1.1.0
  • Apache » Couchdb » Version: 1.1.1
    cpe:2.3:a:apache:couchdb:1.1.1
  • Apache » Couchdb » Version: 1.1.2
    cpe:2.3:a:apache:couchdb:1.1.2
  • Apache » Couchdb » Version: 1.2.0
    cpe:2.3:a:apache:couchdb:1.2.0
  • Apache » Couchdb » Version: 1.2.1
    cpe:2.3:a:apache:couchdb:1.2.1
  • Apache » Couchdb » Version: 1.2.2
    cpe:2.3:a:apache:couchdb:1.2.2
  • Apache » Couchdb » Version: 1.3.0
    cpe:2.3:a:apache:couchdb:1.3.0
  • Apache » Couchdb » Version: 1.3.1
    cpe:2.3:a:apache:couchdb:1.3.1
  • Apache » Couchdb » Version: 1.4.0
    cpe:2.3:a:apache:couchdb:1.4.0
  • Apache » Couchdb » Version: 1.5.0
    cpe:2.3:a:apache:couchdb:1.5.0
  • Apache » Couchdb » Version: 1.5.1
    cpe:2.3:a:apache:couchdb:1.5.1
  • Apache » Couchdb » Version: 1.6.0
    cpe:2.3:a:apache:couchdb:1.6.0
  • Apache » Couchdb » Version: 1.6.1
    cpe:2.3:a:apache:couchdb:1.6.1
  • Apache » Couchdb » Version: 2.0.0
    cpe:2.3:a:apache:couchdb:2.0.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved