Privilege escalation vulnerability in Apache CouchDB - CVE-2021-38295 (Mac OS X)| ID: oval:org.secpod.oval:def:76191 | Date: (C)2021-11-24 (M)2023-12-02 |
| Class: VULNERABILITY | Family: macos |
The host is installed with Apache CouchDB before 3.1.2 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to validate HTML attachment in the database content. Successful exploitation could allow attakers to add or remove data in any database or make configuration changes.
| Platform: |
| Apple Mac OS 14 |
| Apple Mac OS 13 |
| Apple Mac OS 11 |
| Apple Mac OS 12 |
| Apple Mac OS X 10.10 |
| Apple Mac OS X 10.11 |
| Apple Mac OS X 10.12 |
| Apple Mac OS X 10.13 |
| Apple Mac OS X 10.14 |
| Apple Mac OS X 10.15 |
