An issue exists in Couchbase Server 6.5.x and 6.6.x prior to 6.6.6, 7.x prior to 7.0.5, and 7.1.x prior to 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster manager using default credentials.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
couchbase couchbase server |
Vulmon