6.5Medium

CVE-2024-56178

couchbase couchbase server Published: (1 year ago)

Description

An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the security_admin_local role can create a new user in a group that has the admin role.

Weakness (CWE): CWE-281

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
couchbase couchbase server 7.6.0 – ≤ 7.6.3

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:* ≥ 7.6.0 ≤ 7.6.3