Описание
In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.
Ссылки
- Release NotesVendor Advisory
- Vendor Advisory
- Release NotesVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 6.5.0 (включая) до 6.6.2 (исключая)
cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00168
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863
Связанные уязвимости
github
больше 3 лет назад
In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.
EPSS
Процентиль: 38%
0.00168
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-863