CVE-2012-5649

2014-05-2314:55:07

CWE-94

redhat

web.nvd.nist.gov

apache couchdb

jsonp

adobe flash

remote code execution

cve-2012-5649

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.08

Percentile

94.4%

JSON

Apache CouchDB before 1.0.4, 1.1.x before 1.1.2, and 1.2.x before 1.2.1 allows remote attackers to execute arbitrary code via a JSONP callback, related to Adobe Flash.

Affected configurations

Nvd

Node

apachecouchdbRange≤1.0.3

apachecouchdbMatch1.0.0

apachecouchdbMatch1.0.1

apachecouchdbMatch1.0.2

apachecouchdbMatch1.1.0

apachecouchdbMatch1.1.1

apachecouchdbMatch1.2.0

VendorProductVersionCPE
apachecouchdb*cpe:2.3:a:apache:couchdb:*:*:*:*:*:*:*:*
apachecouchdb1.0.0cpe:2.3:a:apache:couchdb:1.0.0:*:*:*:*:*:*:*
apachecouchdb1.0.1cpe:2.3:a:apache:couchdb:1.0.1:*:*:*:*:*:*:*
apachecouchdb1.0.2cpe:2.3:a:apache:couchdb:1.0.2:*:*:*:*:*:*:*
apachecouchdb1.1.0cpe:2.3:a:apache:couchdb:1.1.0:*:*:*:*:*:*:*
apachecouchdb1.1.1cpe:2.3:a:apache:couchdb:1.1.1:*:*:*:*:*:*:*
apachecouchdb1.2.0cpe:2.3:a:apache:couchdb:1.2.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	couchdb	*	cpe:2.3:a:apache:couchdb::::::::
apache	couchdb	1.0.0	cpe:2.3:a:apache:couchdb:1.0.0:::::::*
apache	couchdb	1.0.1	cpe:2.3:a:apache:couchdb:1.0.1:::::::*
apache	couchdb	1.0.2	cpe:2.3:a:apache:couchdb:1.0.2:::::::*
apache	couchdb	1.1.0	cpe:2.3:a:apache:couchdb:1.1.0:::::::*
apache	couchdb	1.1.1	cpe:2.3:a:apache:couchdb:1.1.1:::::::*
apache	couchdb	1.2.0	cpe:2.3:a:apache:couchdb:1.2.0:::::::*