CVE-2020-9040

Name of the Vulnerable Software and Affected Versions Couchbase Server Java SDK versions prior to 2.7.1.1

Description The issue allows a potential attacker to forge an SSL certificate and pose as the intended peer. This can be achieved by crafting a cryptographically valid certificate that will be accepted due to missing hostname verification in the Java SDK's Netty component.

Recommendations For versions prior to 2.7.1.1, update to version 2.7.1.1 or later to resolve the issue.