Couchbase Server 安全漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta, which stems from a fault...

CVE-2021-31158: Incorrect Authorization

In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access...

PT-2021-16722

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 5.x through 6.6.1 Couchbase Server version 7.0.0 Beta Description An issue in Couchbase Server allows incorrect commands to the REST API to result in leaked authentication information. This information is stored in...

PT-2021-17674

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 6.5.x through 6.6.1 Description: An issue in Couchbase Server can cause a crash condition when using the View Engine and Auditing is enabled. Depending on a race condition, this can lead to the credentials of an...

CVE-2021-27924: Cleartext Transmission of Sensitive Information

An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires...

CVE-2021-25644: Cleartext Storage of Sensitive Information

An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators...

Couchbase Server 安全漏洞

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . A security vulnerability exists in the Couchbase Server UI that stems from insecure...

Couchbase Server 安全漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, which stems from a...

Couchbase Server 竞争条件问题漏洞

Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server 6.5.x and 6.6.x through 6.6.1, which stems from a crash condition...

PT-2021-17673

Name of the Vulnerable Software and Affected Versions: Couchbase Server versions 6.x through 6.6.1 Description: An issue was discovered in the Couchbase Server UI where it insecurely logs session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an...

PT-2021-19193

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 6.5.x through 6.6.1 Description The issue concerns the Query Engine in Couchbase Server, where Common Table Expression queries did not correctly check user permissions. This allowed users to access resources beyond...

CVE-2021-27925: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can depending on a race condition cause an internal user with administrator privileges, @nsserver, to have its credentials leaked in cleartext in the...

Unspecified Vulnerability in Couchbase Server

Couchbase Server is a distributed open source NoSQL non-relational database from the U.S. company Couchbase , which mainly supports data query , full-text search and active global replication and other functions . Couchbase Server has a security vulnerability that can be exploited by an attacker ...

CVE-2021-25645

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...

CVE-2021-25645

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...

CVE-2021-25645

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...

Design/Logic Flaw

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...

CVE-2021-25645

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...

CVE-2021-25645

CVE-2021-25645 affects Couchbase Server versions prior to 6.0.5, 6.1.x–6.5.x prior to 6.5.2, and 6.6.x prior to 6.6.1. An internal admin user (@ns_server) leaks credentials in cleartext to log files (cbcollect_info.log, debug.log, ns_couchdb.log, indexer.log, stats.log). The note clarifies that u...

CVE-2021-25645: Cleartext Storage of Sensitive Information

An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @nsserver, leaks credentials in cleartext in the cbcollectinfo.log, debug.log, nscouchdb.log, indexer.log, and stats.log files. NOTE:...