Description
Apache CouchDB 是一个面向文档的数据库管理系统。当CouchDB 以集群模式安装时，会开启epmd服务，并且监听相应端口。由于在默认安装过程中Apache CouchDB 将 Erlang Cookie默认设置为 monster，若未经修改，则攻击者可利用该cookie连接epmd，在知道fqdn的情况下执行任意代码，控制服务器。
Apache CouchDB epmd 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/database/Apache-CouchDB-epmd-%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2022-24706.md
https://avd.aliyun.com/detail?id=AVD-2022-24706
https://rivers.chaitin.cn/blog/cq950a90lnechd244f90
https://www.h3c.com/cn/d_202207/1644557_30003_0.htm
https://docs.couchdb.org/en/stable/cve/2022-24706.html
https://www.exploit-db.com/exploits/50914
https://medium.com/@_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd
https://www.sentinelone.com/vulnerability-database/cve-2022-24706/
https://zgao.top/cve-2022-24706-apache-couchdb-%E9%BB%98%E8%AE%A4erlang-cookie%E7%9A%84rce%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90/