7.5

CVE-2021-25644

EPSS 0.64%
Veröffentlicht 19.05.2021 19:15:08
Zuletzt bearbeitet 21.11.2024 05:55:12
Erkennungen
Login

An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Couchbase ≫ Couchbase Server Version >= 5.0.0 <= 6.6.1

Couchbase ≫ Couchbase Server Version 7.0.0 Update beta

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.64%	0.457

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-312 Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

https://www.couchbase.com/resources/security#SecurityAlerts

Vendor Advisory

https://www.couchbase.com/downloads

Vendor Advisory

Product

https://nvd.nist.gov/vuln/detail/CVE-2021-25644

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-25644

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-25644

EUVD