Description (CNA)
Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users’ replications, not just their own. Users are recommended to upgrade to version 3.5.3, which fixes this issue.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache CouchDB | affected 0 before 3.5.3 |
CWE
No CWE identifiers supplied.
References
- https://lists.apache.org/thread.html/pj83174r8f8f64odf47fwhozbfjtot0f
- https://lists.apache.org/thread/ro57p4r2lhxn2n4712ppx7r11oqq900n
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.