CVE-2020-9041: High severity couchbase server vulnerability
In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0, the Cluster management, views, query, and full-text search endpoints are vulnerable to the Slowloris denial-of-service attack because they don't more aggressively terminate slow connections.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Couchbase Server and Sync Gateway vulnerability?
The vulnerability ID for this Couchbase Server and Sync Gateway vulnerability is CVE-2020-9041.
What is the title of this vulnerability?
The title of this vulnerability is 'In Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0 the Cluster management views quer…'
Which components are affected by this vulnerability?
Couchbase Server 6.0.3 and Couchbase Sync Gateway through 2.7.0 are affected by this vulnerability.
What is the severity of CVE-2020-9041 vulnerability?
The severity of the CVE-2020-9041 vulnerability is high, with a CVSS severity score of 7.5.
How can I fix the CVE-2020-9041 vulnerability?
To fix the CVE-2020-9041 vulnerability, update to the latest version of Couchbase Server and Couchbase Sync Gateway.