> For the complete documentation index, see [llms.txt](https://icybersec.gitbook.io/cybersecuritynote-en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://icybersec.gitbook.io/cybersecuritynote-en/security-vulnerability/unauthorized-vulnerability/couchdb-unauthorized-access-vulnerability.md).

# CouchDB Unauthorized Access Vulnerability

## Description

Due to improper configuration, CouchDB is vulnerable to unauthorized access and malicious exploitation.

Attackers can access internal data without authentication, which may result in the leakage of sensitive information and the malicious clearing of all data by hackers.

## Vulnerability Deployment

> <https://github.com/vulhub/vulhub/blob/master/couchdb/CVE-2017-12636/README.zh-cn.md>

Start using docker-compose.

```bash
cd couchdb/CVE-2017-12636/
docker-compose up -d
```

## Exploitation

Visit the 5984 port to see the version information.

![image-20220519200512720](https://3024627155-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXR7Pin8lqeHtCxmQjCpG%2Fuploads%2Fgit-blob-6f23c9a91af6e010007d7087bbdb12005b13bd00%2Fimage-20220519200512720.png?alt=media)

Visit the `/_config` interface to see the CouchDB configuration information.

![image-20220519200626134](https://3024627155-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXR7Pin8lqeHtCxmQjCpG%2Fuploads%2Fgit-blob-4fcdba0e9048713489970e1f59914b22e19313e1%2Fimage-20220519200626134.png?alt=media)