{"id":"CVE-2018-8007","published":"2018-07-11T13:00:00Z","modified":"2024-09-16T17:04:00Z","title":"Apache CouchDB administrative users can configure the database server via HTTP(S)","vendor":"Apache Software Foundation","product":"Apache CouchDB","tier":"core","eol":null,"affectedVersions":[{"vendor":"Apache Software Foundation","product":"Apache CouchDB","versions":["< 1.7.2","2.0.0 to 2.1.1"]}],"description":{"text":"Apache CouchDB administrative users can configure the database server via HTTP(S). Due to insufficient validation of administrator-supplied configuration settings via the HTTP API, it is possible for a CouchDB administrator user to escalate their privileges to that of the operating system's user that CouchDB runs under, by bypassing the blacklist of configuration settings that are not allowed to be modified via the HTTP API. This privilege escalation effectively allows an existing CouchDB admin user to gain arbitrary remote code execution, bypassing already disclosed CVE-2017-12636. Mitigation: All users should upgrade to CouchDB releases 1.7.2 or 2.1.2.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.12164,"percentile":0.96143,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2026-06-30","exploitedFirstSeen":"2026-06-30","ransomware":false,"evidence":[{"url":"https://blog.xlab.qianxin.com/rustduck-en/","date":"2026-06-30"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":5,"pulses":[{"name":"EbeeJuly2026 Pt1","url":"https://otx.alienvault.com/pulse/6a4b3cc2ebf14a6ed2559ae1","created":"2026-07-06"},{"name":"RustDuck: An In-Depth Analysis of a Two-Stage Botnet","url":"https://otx.alienvault.com/pulse/6a4737fd1771ecc96e06197a","created":"2026-07-03"},{"name":"RustDuck: An In-Depth Analysis of a Two-Stage Botnet","url":"https://otx.alienvault.com/pulse/6a4635e7998db450b0ccdee2","created":"2026-07-02"},{"name":"RustDuck: An In-Depth Analysis of a Two-Stage Botnet.","url":"https://otx.alienvault.com/pulse/6a453ee2b51881089a5f70ea","created":"2026-07-01"},{"name":"Thor Lite Scan - 10.7.15 - Ubuntu Scan on Archived Files","url":"https://otx.alienvault.com/pulse/664cc3c1938ed0b9abf026a2","created":"2024-05-21"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3c1439409216.6221.1531246856676.JavaMail.Joan%40RITA%3e","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://security.gentoo.org/glsa/201812-06","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://mail-archives.apache.org/mod_mbox/couchdb-announce/201807.mbox/%3C1699016538.6219.1531246785603.JavaMail.Joan%40RITA%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://www.securityfocus.com/bid/104741","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://www.mdsec.co.uk/2018/08/advisory-cve-2018-8007-apache-couchdb-remote-code-execution/","tags":["x_refsource_MISC"]},{"url":"https://blog.couchdb.org/2018/07/10/cve-2018-8007/","tags":["x_refsource_CONFIRM"]},{"url":"https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu03935en_us","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3JOUCX7LHDV4YWZDQNXT5NTKKRANZQW/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5FPHVVU5KMRFKQTJPAM3TBGC7LKCWQS/","tags":["vendor-advisory","x_refsource_FEDORA"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-19718","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-19718","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2018-07-11","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-8007","provenance":"source"},{"date":"2026-06-30","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://blog.xlab.qianxin.com/rustduck-en/","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":61.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":5.0,"detail":"added 121 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.23,"detail":"percentile 0.9614"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":1.77,"detail":"5 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-apache-couchdb-cve-2017-12636","children":[{"from":"CVE-2018-8007","to":"CVE-2018-11769","relation":"bypass","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"bypass","quote":"This privilege escalation effectively allows a CouchDB admin user to gain arbitrary remote code execution, bypassing CVE-2017-12636 and CVE-2018-8007.","from":"CVE.org","in":"CVE-2018-11769"},{"kind":"similar","provenance":"machine","score":0.92,"basis":"same product + description similarity"}]}]}}