medium4.4
CVE-2021-27925
An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1.
Impact
An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the ns_server.info.log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Couchbase | Couchbase Server | from 6.5.0 before 6.6.2 |