Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-42951

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster manager using default credentials.

Published

2023-02-06T21:15:09.357

Last Modified

2025-03-26T15:15:40.167

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses
  • Type: Primary
    CWE-287
    CWE-362
  • Type: Secondary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application couchbase couchbase_server < 6.6.6 Yes
Application couchbase couchbase_server < 7.0.5 Yes
Application couchbase couchbase_server < 7.1.2 Yes
References