medium4.9
CVE-2021-25643
An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2.
Impact
An issue was discovered in Couchbase Server 5.x and 6.x before 6.5.2 and 6.6.x before 6.6.2. Internal users with administrator privileges, @cbq-engine-cbauth and @index-cbauth, leak credentials in cleartext in the indexer.log file when they make a /listCreateTokens, /listRebalanceTokens, or /listMetadataTokens call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Couchbase | Couchbase Server | from 5.0.0 before 6.5.2 from 6.6.0 before 6.6.2 |