{"id":"MGASA-2022-0466","summary":"Updated couchdb packages fix security vulnerability","details":"In Apache CouchDB prior to 3.2.2, an attacker can access an improperly\nsecured default installation without authenticating and gain admin\nprivileges. The CouchDB documentation has always made recommendations for\nproperly securing an installation, including recommending using a firewall\nin front of all CouchDB installations. (CVE-2022-24706)\n","modified":"2026-04-16T04:43:23.600374771Z","published":"2022-12-17T18:48:08Z","upstream":["CVE-2022-24706"],"references":[{"type":"ADVISORY","url":"https://advisories.mageia.org/MGASA-2022-0466.html"},{"type":"REPORT","url":"https://bugs.mageia.org/show_bug.cgi?id=30342"},{"type":"WEB","url":"https://www.openwall.com/lists/oss-security/2022/04/26/1"}],"affected":[{"package":{"name":"couchdb","ecosystem":"Mageia:8","purl":"pkg:rpm/mageia/couchdb?arch=source&distro=mageia-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.2-1.mga8"}]}],"ecosystem_specific":{"section":"core"},"database_specific":{"source":"https://advisories.mageia.org/MGASA-2022-0466.json"}}],"schema_version":"1.7.5","credits":[{"name":"Mageia","contact":["https://wiki.mageia.org/en/Packages_Security_Team"],"type":"COORDINATOR"}]}