CVE-2021-31158

In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions…

published May 19, 2021

CVSS
—
EPSS
1%
Percentile
52.8
In the wild
Unconfirmed
What it is

In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00704 · 52.8th percentile
Published
2021-05-19T18:37Z
EPSS history
Timeline
  • 19 MAY 18:37Z
    In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions…
    cvelistv5