CVE coverage
View on NVD →
CVE-2022-24706
CVSS 9.8
Actively exploited (KEV)
2 detections found
In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin privileges. The CouchDB documentation has always made recommendations for properly securing an installation, including recommending using a firewall in front of all CouchDB installations.
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| snort | ET INFO Apache CouchDB Erlang RPC OS Command | rev 1 | 2026-10-20 |
| suricata | ET HUNTING Apache CouchDB Erlang RPC OS Command | rev 1 | 2026-10-20 |