CVE-2017-12636

{"id": "CVE-2017-12636", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2017-11-14T20:29:00.247", "references": [{"url": "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E", "source": "security@apache.org"}, {"url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html", "source": "security@apache.org"}, {"url": "https://security.gentoo.org/glsa/201711-16", "tags": ["Third Party Advisory"], "source": "security@apache.org"}, {"url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us", "source": "security@apache.org"}, {"url": "https://www.exploit-db.com/exploits/44913/", "source": "security@apache.org"}, {"url": "https://www.exploit-db.com/exploits/45019/", "source": "security@apache.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet."}, {"lang": "es", "value": "Los usuarios administrativos de CouchDB pueden configurar el servidor de la base de datos mediante HTTP(S). Algunas de las opciones de configuraci\u00f3n incluyen rutas para operar binarios a nivel de sistema que son iniciados subsecuentemente por CouchDB. Esto permite que un usuario administrador en versiones anteriores a la 1.7.0 y versiones 2.x anteriores a la 2.1.1 de Apache CouchDB ejecuten comandos shell arbitrarios como el usuario CouchDB, incluyendo la descarga y ejecuci\u00f3n de scripts del internet p\u00fablico."}], "lastModified": "2023-11-07T02:38:27.610", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apache:couchdb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DCEE0A7F-2D9E-4B71-AB1D-F7E51FAF8839", "versionEndExcluding": "1.7.0"}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C28D397-7FB6-472F-A602-C2E7E4CCC7D9"}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20694545-A117-4327-9704-E4E9C26C0A10"}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "53337458-D551-42E3-825D-1E94AB8409D3"}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6848350-0CDC-4CB1-B6DB-1A47227F10AF"}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A820A52-9170-4E32-B224-1C9E7F48A6D2"}], "operator": "OR"}]}], "sourceIdentifier": "security@apache.org"}