Intrusion PreventionApache.CouchDB.JSON.Privilege.Escalation
Description
This indicates an attack attempt to exploit an Elevation of Privilege vulnerability in Apache CouchDB.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted HTTP request. A remote attacker may be able to exploit this to elevate their privileges, via a crafted HTTP request.
Affected Products
Apache Software Foundation CouchDB prior to 2.1.1
Apache Software Foundation CouchDB prior to 1.7
Impact
Privilege Escalation: Remote attackers can leverage their privileges on vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-06 | 14.627 | Severity:high:critical |
| ID | 45013 |
| Created | Dec 12, 2017 |
| Updated | Nov 15, 2021 |
| Risk |
|
| CVE ID | CVE-2017-12635 |
| Exploit Prediction Score | 97.35% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, MacOS |
| Affected App | Apache |