CVE-2021-31158

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 6.5.x through 6.6.1

Description The issue concerns the Query Engine in Couchbase Server, where Common Table Expression queries did not correctly check user permissions. This allowed users to access resources beyond their explicitly allowed permissions, providing read-access to unauthorized data.

Recommendations For Couchbase Server versions 6.5.x through 6.6.1, consider restricting access to the Query Engine until a patch is available, or apply specific configuration changes to enforce proper permission checks for Common Table Expression queries. At the moment, there is no information about a newer version that contains a fix for this vulnerability.