CVE-2021-27924

An issue was discovered in Couchbase Server 6.x through 6.6.1

published May 19, 2021

CVSS
—
EPSS
1%
Percentile
45.2
In the wild
Unconfirmed
What it is

An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00549 · 45.2th percentile
Published
2021-05-19T19:01Z
EPSS history
Timeline
  • 19 MAY 19:01Z
    An issue was discovered in Couchbase Server 6.x through 6.6.1
    cvelistv5