CVE-2021-35943: Critical severity wut com-server highspeed 100baselx vulnerability
Published Sep 29, 2021
·Updated
Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.
Affected Software
2 affected components
Couchbase Couchbase Server>=6.5.0<=6.5.2
Couchbase Couchbase Server>=6.6.0<6.6.3
Event History
Sep 29, 2021
CVE Published
via MITRE·07:17 PM
Data Sourced
via MITRE·07:17 PM
Description
Frequently Asked Questions
1
What is CVE-2021-35943?
CVE-2021-35943 is a vulnerability in Couchbase Server 6.5.x and 6.6.x through 6.6.2 that allows externally managed users to use an empty password.
2
What is the severity of CVE-2021-35943?
The severity of CVE-2021-35943 is critical with a CVSS score of 9.8.
3
How does CVE-2021-35943 impact Couchbase Server?
CVE-2021-35943 allows externally managed users to bypass password requirements in Couchbase Server 6.5.x and 6.6.x through 6.6.2.
4
How can I fix CVE-2021-35943?
To fix CVE-2021-35943, users should upgrade their Couchbase Server to a version that includes the patch.
5
Where can I find more information about CVE-2021-35943?
More information about CVE-2021-35943 can be found in the release notes of Couchbase Server and on the Couchbase website.