CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2021-31158

In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 38.7%

CVSS Severity

CVSS v3 Score 6.5

CVSS v2 Score 4.0

References

https://docs.couchbase.com/server/current/release-notes/relnotes.html
https://www.couchbase.com/resources/security#SecurityAlerts
https://docs.couchbase.com/server/current/release-notes/relnotes.html
https://www.couchbase.com/resources/security#SecurityAlerts

Products affected by CVE-2021-31158

Couchbase » Couchbase Server » Version: 6.5.0

cpe:2.3:a:couchbase:couchbase_server:6.5.0
Couchbase » Couchbase Server » Version: 6.5.1

cpe:2.3:a:couchbase:couchbase_server:6.5.1
Couchbase » Couchbase Server » Version: 6.5.2

cpe:2.3:a:couchbase:couchbase_server:6.5.2
Couchbase » Couchbase Server » Version: 6.6.0

cpe:2.3:a:couchbase:couchbase_server:6.6.0
Couchbase » Couchbase Server » Version: 6.6.1

cpe:2.3:a:couchbase:couchbase_server:6.6.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-31158

Products

Pricing

Contact Us