Apache Couchdb Vulnérabilités

Chronologie

Version

1.0.0	4
1.0.1	4
0.8.0	4
1.0.2	3
1.0.3	3

Contre-mesures

Official Fix	9
Temporary Fix	0
Workaround	0
Unavailable	1
Not Defined	6

Exploitabilité

High	3
Functional	0
Proof-of-Concept	3
Unproven	0
Not Defined	10

Vecteur d'accès

Not Defined	0
Physical	0
Local	2
Adjacent	3
Network	11

Authentification

Not Defined	0
High	0
Low	6
None	10

Interaction de l'utilisateur

Not Defined	0
Required	4
None	12

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	3
≤6	4
≤7	5
≤8	1
≤9	2
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	4
≤6	4
≤7	5
≤8	1
≤9	1
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	2
≤5	2
≤6	5
≤7	4
≤8	2
≤9	1
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	3
≤9	0
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	1
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	0
<2k	0
<5k	1
<10k	10
<25k	5
<50k	0
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	13
<2k	1
<5k	1
<10k	1
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (33): 0.1, 0.8, 0.8.1, 0.9, 0.9.1, 0.9.2, 0.10.1, 0.10.2, 0.11, 0.11.1, 0.11.2, 1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.1, 1.1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 2, 2.0, 2.1, 3.1, 3.1.1, 3.2, 3.2.1, 3.3, 3.3.1, 3.3.2

Link to Product Website: https://www.apache.org/

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
12/12/2023	4.6	4.5	Apache CouchDB Design Document elévation de privilèges	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.05	CVE-2023-45725
02/05/2023	5.1	5.1	Apache CouchDB couchjs divulgation de l'information	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.05	CVE-2023-26268
26/04/2022	6.3	6.0	Apache CouchDB elévation de privilèges	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2022-24706
15/10/2021	3.5	3.4	Apache CouchDB HTML Attachment HTML injection	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2021-38295
11/07/2018	6.7	6.6	Apache CouchDB HTTP API elévation de privilèges	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2018-8007
12/02/2018	6.5	6.2	Apache CouchDB Windows Installer nssm.exe elévation de privilèges	$5k-$25k	$0-$5k	Proof-of-Concept	Not Defined	0.08	CVE-2016-8742
14/11/2017	6.7	6.6	Apache CouchDB Database Server elévation de privilèges	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2017-12636
14/11/2017	8.5	8.4	Apache CouchDB JSON Parser elévation de privilèges	$5k-$25k	$0-$5k	High	Official Fix	0.00	CVE-2017-12635
23/05/2014	7.3	7.0	Apache CouchDB elévation de privilèges	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2012-5649
26/03/2014	5.3	5.0	Apache CouchDB UUIDS _uuids elévation de privilèges	$5k-$25k	$0-$5k	Proof-of-Concept	Unavailable	0.00	CVE-2014-2668