CVE-2026-107755:詳細資料

CVE-2026-107755

2026-10-20
16h16 +00:00
A01-Broken Access Control
2026-10-20
19h34 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

Insufficient filtering of credentials in the _replicator database in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user to read replication credentials of other users’ replications, not just their own. Users are recommended to upgrade to version 3.5.3, which fixes this issue.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

參考資料