This script is Copyright (C) 2010-2015 Tenable Network Security, Inc.
The remote database server allows administrative access without
Nessus was able to perform administrative actions on the remote
CouchDB server without providing authentication. A remote attacker
could exploit this to take control of the CouchDB server.
See also :
Secure the CouchDB installation with an administrative account.
Risk factor :
High / CVSS Base Score : 7.5
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now