Couchbase Server@6.5.0 Security Vulnerabilities and Issues — Couchbase Server@6.5.0 CVE List

Lucene search

CouchbaseCouchbase Server6.5.0

9 matches found

CVE•added 2024/02/29 1:41 a.m.•84 views

CVE-2023-45874

An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).

4.3CVSS6.7AI score0.00222EPSS

CVE•added 2021/05/19 7:15 p.m.•58 views

CVE-2021-31158

In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.

6.5CVSS6.4AI score0.00158EPSS

CVE•added 2022/07/12 2:15 p.m.•46 views

CVE-2022-33911

An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.

5.3CVSS5.1AI score0.00456EPSS

CVE•added 2021/05/19 7:15 p.m.•44 views

CVE-2021-27925

An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the n...

4.4CVSS4.7AI score0.00223EPSS

CVE•added 2021/09/29 8:15 p.m.•41 views

CVE-2021-35943

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.

9.8CVSS9.4AI score0.00365EPSS

CVE•added 2023/02/06 9:15 p.m.•39 views

CVE-2022-42951

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster...

8.1CVSS8.1AI score0.00188EPSS

CVE•added 2021/09/29 8:15 p.m.•36 views

CVE-2021-35944

Couchbase Server 6.5.x, 6.6.x through 6.6.2, and 7.0.0 has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached.

7.5CVSS7.5AI score0.00578EPSS

CVE•added 2021/09/29 8:15 p.m.•33 views

CVE-2021-35945

Couchbase Server 6.5.x, 6.6.0 through 6.6.2, and 7.0.0, has a Buffer Overflow. A specially crafted network packet sent from an attacker can crash memcached.

7.5CVSS7.5AI score0.00578EPSS

CVE•added 2021/11/02 12:15 p.m.•30 views

CVE-2021-42763

Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request from the pluggable UI (query workbench etc) to the specific service. In the backtrace, the Basic Auth Header included in the HTTP request, ...

7.5CVSS7.4AI score0.00162EPSS