CVE-2022-42951

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 6.5.x through 6.6.5 Couchbase Server versions 7.0.0 through 7.0.4 Couchbase Server versions 7.1.0 through 7.1.1

Description An issue was discovered in Couchbase Server during the start-up of a node, where there is a small window of time before the cluster management authentication has started, allowing an attacker to connect to the cluster manager using default credentials.

Recommendations For Couchbase Server versions 6.5.x through 6.6.5, update to version 6.6.6 or later. For Couchbase Server versions 7.0.0 through 7.0.4, update to version 7.0.5 or later. For Couchbase Server versions 7.1.0 through 7.1.1, update to version 7.1.2 or later.