{"containers": {"cna": {"affected": [{"product": "Apache CouchDB", "vendor": "Apache Software Foundation", "versions": [{"status": "affected", "version": "1.2.0 to 1.6.1"}, {"status": "affected", "version": "2.0.0 to 2.1.0"}]}], "datePublic": "2017-11-14T00:00:00", "descriptions": [{"lang": "en", "value": "CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet."}], "problemTypes": [{"descriptions": [{"description": "Information Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-05-13T18:06:10", "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache"}, "references": [{"name": "45019", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/45019/"}, {"name": "[dev] 20171114 Apache CouchDB CVE-2017-12635 and CVE-2017-12636", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E"}, {"name": "44913", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/44913/"}, {"name": "GLSA-201711-16", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201711-16"}, {"name": "[debian-lts-announce] 20180121 [SECURITY] [DLA 1252-1] couchdb security update", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@apache.org", "DATE_PUBLIC": "2017-11-14T00:00:00", "ID": "CVE-2017-12636", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Apache CouchDB", "version": {"version_data": [{"version_value": "1.2.0 to 1.6.1"}, {"version_value": "2.0.0 to 2.1.0"}]}}]}, "vendor_name": "Apache Software Foundation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure"}]}]}, "references": {"reference_data": [{"name": "45019", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/45019/"}, {"name": "[dev] 20171114 Apache CouchDB CVE-2017-12635 and CVE-2017-12636", "refsource": "MLIST", "url": "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E"}, {"name": "44913", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/44913/"}, {"name": "GLSA-201711-16", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201711-16"}, {"name": "[debian-lts-announce] 20180121 [SECURITY] [DLA 1252-1] couchdb security update", "refsource": "MLIST", "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html"}, {"name": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us", "refsource": "CONFIRM", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us"}]}}}}, "cveMetadata": {"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "assignerShortName": "apache", "cveId": "CVE-2017-12636", "datePublished": "2017-11-14T00:00:00", "dateReserved": "2017-08-07T00:00:00", "dateUpdated": "2019-05-13T18:06:10", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:apache:couchdb:*:*:*:*:*:*:*:*", "matchCriteriaId": "DCEE0A7F-2D9E-4B71-AB1D-F7E51FAF8839", "versionEndExcluding": "1.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7C28D397-7FB6-472F-A602-C2E7E4CCC7D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "20694545-A117-4327-9704-E4E9C26C0A10", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "53337458-D551-42E3-825D-1E94AB8409D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "C6848350-0CDC-4CB1-B6DB-1A47227F10AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:apache:couchdb:2.0.0:rc4:*:*:*:*:*:*", "matchCriteriaId": "2A820A52-9170-4E32-B224-1C9E7F48A6D2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB. This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user, including downloading and executing scripts from the public internet."}, {"lang": "es", "value": "Los usuarios administrativos de CouchDB pueden configurar el servidor de la base de datos mediante HTTP(S). Algunas de las opciones de configuraci\u00f3n incluyen rutas para operar binarios a nivel de sistema que son iniciados subsecuentemente por CouchDB. Esto permite que un usuario administrador en versiones anteriores a la 1.7.0 y versiones 2.x anteriores a la 2.1.1 de Apache CouchDB ejecuten comandos shell arbitrarios como el usuario CouchDB, incluyendo la descarga y ejecuci\u00f3n de scripts del internet p\u00fablico."}], "id": "CVE-2017-12636", "lastModified": "2023-11-07T02:38:27.610", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-11-14T20:29:00.247", "references": [{"source": "security@apache.org", "url": "https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67%40%3Cdev.couchdb.apache.org%3E"}, {"source": "security@apache.org", "url": "https://lists.debian.org/debian-lts-announce/2018/01/msg00026.html"}, {"source": "security@apache.org", "tags": ["Third Party Advisory"], "url": "https://security.gentoo.org/glsa/201711-16"}, {"source": "security@apache.org", "url": "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us"}, {"source": "security@apache.org", "url": "https://www.exploit-db.com/exploits/44913/"}, {"source": "security@apache.org", "url": "https://www.exploit-db.com/exploits/45019/"}], "sourceIdentifier": "security@apache.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}