PT-2018-18377 · Apache · Apache Couchdb

Francesco Oddo · Published 2018-07-11 · Updated 2019-05-13 · CVE-2018-8007

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Apache CouchDB versions prior to 1.7.2 Apache CouchDB versions prior to 2.1.2

Description: The issue allows an existing CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under. This is due to insufficient validation of administrator-supplied configuration settings via the HTTP API, enabling the bypassing of the blacklist of configuration settings that are not allowed to be modified via the HTTP API. As a result, an existing CouchDB admin user can gain arbitrary remote code execution.

Recommendations: For Apache CouchDB versions prior to 1.7.2, upgrade to release 1.7.2. For Apache CouchDB versions prior to 2.1.2, upgrade to release 2.1.2.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-8007

SUSE-SU-2018:2578-1

SUSE-SU-2018:2765-1

Affected Products

Apache Couchdb

References · 24

• 🔥 https://mdsec.co.uk/2018/08/advisory-cve-2018-8007-apache-couchdb-remote-code-execution · Exploit
• https://cve.org/CVERecord?id=CVE-2018-8007 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JOUCX7LHDV4YWZDQNXT5NTKKRANZQW · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2578-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2018:2765-1 · Vendor Advisory
• https://security.gentoo.org/glsa/201812-06 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-8007 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8007 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-8007 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5FPHVVU5KMRFKQTJPAM3TBGC7LKCWQS · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8007 · Security Note
• https://suse.com/security/cve/CVE-2018-8007 · Note
• https://blog.couchdb.org/2018/07/10/cve-2018-8007 · Note
• https://suse.com/support/update/announcement/2018/suse-su-20182765-1 · Note
• https://bugzilla.suse.com/1100973 · Note