Test ID:	1.3.6.1.4.1.25623.1.0.813906
Category:	Databases
Title:	Apache CouchDB 1.x < 1.7.2, 2.x < 2.1.2 Privilege Escalation Vulnerability - Windows
Summary:	Apache CouchDB is prone to a privilege escalation; vulnerability.
Description:	Summary: Apache CouchDB is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw is due to an insufficient validation of administrator-supplied configuration settings via the HTTP API. Vulnerability Impact: Successful exploitation will allow attackers to escalate their privileges to that of the operating system's and execute arbitrary code. Affected Software/OS: Apache CouchDB versions 1.x prior to 1.7.2 and 2.x prior to 2.1.2. Solution: Update to version 1.7.2, 2.1.2 or later. Please see the references for more information. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-8007 BugTraq ID: 104741 http://www.securityfocus.com/bid/104741 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5FPHVVU5KMRFKQTJPAM3TBGC7LKCWQS/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X3JOUCX7LHDV4YWZDQNXT5NTKKRANZQW/ https://security.gentoo.org/glsa/201812-06 https://www.mdsec.co.uk/2018/08/advisory-cve-2018-8007-apache-couchdb-remote-code-execution/ http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3C1699016538.6219.1531246785603.JavaMail.Joan%40RITA%3E http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3c1439409216.6221.1531246856676.JavaMail.Joan@RITA%3e
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.