ID:10783 - Exploit for Permissions, Privileges, and Access Controls in CouchDB - CVE-2017-12635

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due differences in the Erlang-based JSON parser and JavaScript-based JSON parser that can lead to submitting "_users" documents with duplicate keys for "roles" used for access control within the database, including the "_admin" role. A remote authenticated user can create a specially crafted document and abuse the JSON parser differences result in behavior for two 'roles' keys within a single document and gain administrative privileges within the database.

Remediation