Couchbase Server Information Disclosure Vulnerability

Couchbase Server is a distributed database from Couchbase Inc. that supports data query, full-text search, and active global replication.An information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4. The vulnerability stems from the fact that when using the server-eshell command Erlang A cookie is passed to erl via command-line arguments, which can be exploited to obtain the cookie.