couchdb-unauthorized: CouchDB Unauthorized

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://stackoverflow.com/questions/27247217/cant-access-couchdb-instance-returns-401-unauthorized
• https://github.com/apache/couchdb/discussions/3859
• https://www.couchbase.com/forums/t/unauthorized-error-while-accessing-data-from-couchdb/28836
• https://medium.com/@eiri/couchdb-authorization-in-nutshell-5ae697fe9a
• https://github.com/apache/couchdb/issues/2908
• https://serverfault.com/questions/742990/couchdb-authentication-and-security
• https://docs.couchdb.org/en/stable/api/server/authn.html
• https://nvd.nist.gov/vuln/detail/CVE-2022-24706
• https://www.sentinelone.com/vulnerability-database/cve-2022-24706/
• https://docs.couchdb.org/en/stable/cve/2017-12635.html
• https://github.com/assalielmehdi/CVE-2017-12635

Related Vulnerabilities

• PoCCVE-2026-46442: Flowise < 3.1.2 - node-custom-function Unauthorized RCE
• PoCCVE-2026-27771: Gitea Container Registry - Unauthorized Private Image Access
• PoCCVE-2025-55303: Astro - Unauthorized Third-Party Image Access
• PoCCVE-2023-3277: MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation
• bt742-pma-unauthorized-access: BT742 PMA Unauthorized Access
• jenkins-unauthorized-rce: Jenkins unauthorized rce
• qizhi-fortressaircraft-unauthorized: qizhi fortressaircraft unauthorized
• nacos-unauthorized-config-download: Nacos 未授权下载配置信息
• PoCCVE-2017-12635: Apache CouchDB 1.7.0 / 2.x < 2.1.1 - Remote Privilege Escalation
• PoCCVE-2020-7136: HPE Smart Update Manager < 8.5.6 - Remote Unauthorized Access
• PoCCVE-2021-35336: Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access
• PoCCVE-2021-42627: D-Link DIR-615 - Unauthorized Access
• PoCCVE-2021-45232: Apache APISIX Dashboard <2.10.1 - API Unauthorized Access