VYPR
← All advisories
High severity8.1NVD Advisory· Published Feb 6, 2023· Updated Jun 17, 2026

CVE-2022-42951

CVE-2022-42951

Description

An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster manager using default credentials.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Couchbase/Server3 versions
    cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*range: >=6.5.0,<6.6.6
    • (no CPE)
    • (no CPE)range: 6.5.x, 6.6.x before 6.6.6, 7.x before 7.0.5, 7.1.x before 7.1.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.