Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or /listMetadataTokens call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Couchbase Server 安全漏洞
Vulnerability Description
Couchbase Server是美国Couchbase公司的一款分布式的开源NoSQL(非关系型)数据库,它主要支持数据查询、全文检索和主动全局复制等功能。 Couchbase Server 存在安全漏洞,该漏洞源于具有管理员权限的内部用户@cbq-engine-cbauth和@index-cbauth在执行listCreateTokens、listRebalanceTokens或listmetadata atokens调用时,会在index.com .log文件中以明文形式泄露凭证。以下产品和版本受到
CVSS Information
N/A
Vulnerability Type
N/A