CVE-2017-12636

High

Published: 14/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CouchDB administrative users can configure the database server via HTTP(S), allowing them to specify paths for operating system-level binaries. This enables the CouchDB user to execute arbitrary shell commands, including downloading and executing scripts from the public internet.

Risk Assessment

The risk associated with this vulnerability is the potential for administrative users to execute malicious code, which could lead to system compromise and data leakage.

Recommendation

It is recommended to upgrade Apache CouchDB to version 1.7.0 or 2.1.1 and above to mitigate this vulnerability. Additionally, access to administrative accounts should be restricted and user activities monitored.

Other vulnerabilities in Apache CouchDB

CVE-2017-12635Critical
In Apache CouchDB before version 1.7.0 and 2.x before version 2.1.1, a vulnerability allows submitting _users documents with duplicate 'roles' keys, which can lead to non-admin users being granted admin privileges.

Original NVD description (English source)

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet.