CVE-2019-11466

In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port…

published September 10, 2019

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01106 · 65.6th percentile
Published
2019-09-10T17:02Z
EPSS history
Timeline
  • 10 SEP 17:02Z
    In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port…
    cvelistv5