CVE-2019-11496

Name of the Vulnerable Software and Affected Versions Couchbase Server versions prior to 5.1.0

Description The issue concerns unauthenticated and unauthorized access to the "default" bucket in Couchbase Server. Prior to version 5.0, the "default" bucket allowed read and write access without authentication. Although the behavior was changed in version 5.0 to require authentication, editing the properties of the "default" bucket could still allow unauthenticated access.

Recommendations For versions prior to 5.1.0, update to version 5.1.0 or 5.5.0 to fix the issue. As a temporary workaround, consider restricting access to the "default" bucket to minimize the risk of exploitation.