PT-2023-29658 · Apache+1 · Apache Couchdb+1
Mike Rhodes
+3
·
Published
2023-12-05
·
Updated
2024-03-06
·
CVE-2023-45725
CVSS v3.1
5.7
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Apache CouchDB versions prior to 3.3.3
IBM Cloudant versions prior to 8413
Description
Design document functions that receive a user HTTP request object may expose authorization or session cookie headers of the user who accesses the document. These design document functions include
list, show, rewrite, and update. An attacker can leak the session component using an HTML-like output, insert the session as an external resource, or store the credential in a local document with an update function. For the attack to succeed, the attacker must be able to insert the design documents into the database and then manipulate a user to access a function from that design document.Recommendations
For Apache CouchDB versions prior to 3.3.3, upgrade to version 3.3.3 or later.
For IBM Cloudant versions prior to 8413, upgrade to version 8413 or later.
As a temporary workaround, consider avoiding the use of design documents from untrusted sources that may attempt to access or manipulate request object headers. Restrict access to the vulnerable design document functions
list, show, rewrite, and update to minimize the risk of exploitation.Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Couchdb
Ibm Cloudant