high7.5
CVE-2020-9041
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the …
Impact
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Couchbase | Couchbase Server | Version 6.0.3 |
| Couchbase | Sync Gateway | through 2.7.0 |