CVE-2021-27924: Medium severity wut com-server highspeed 100baselx vulnerability
Published May 19, 2021
·Updated
An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires.
Affected Software
1 affected component
Couchbase Couchbase Server>=6.0.0<6.6.2
Event History
May 19, 2021
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-27924.
2
What is the severity of CVE-2021-27924?
The severity of CVE-2021-27924 is medium with a severity value of 5.9.
3
What is affected by CVE-2021-27924?
Couchbase Server 6.x through 6.6.1 is affected by CVE-2021-27924.
4
How does CVE-2021-27924 work?
CVE-2021-27924 allows for the insecure logging of session cookies in the logs, which can lead to impersonation of a user if the log files are obtained by an attacker before a session cookie expires.
5
How can I fix CVE-2021-27924?
To fix CVE-2021-27924, it is recommended to upgrade to version 6.6.2 or later of Couchbase Server.