
Apache CouchDB 3.2.1 - Remote Code Execution (RCE)
Data: 2022-01-21
Autor do Exploit: Konstantin Burov, @_sadshade
Software Link: https://couchdb.apache.org/
Versão: 3.2.1 e anteriores
Testado em: Kali 2021.2
Baseado em Erlang Cookie - Execução Remota de Código de 1F98D
Shodan: porta:4369 "name couchdb at"
CVE: CVE-2022-24706
Referências:
https://habr.com/ru/post/661195/
https://www.exploit-db.com/exploits/49418
https://insinuator.net/2017/10/erlang-distribution-rce-and-a-cookie-bruteforcer/