AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-42763

HIGH · CVSS 7.5 EPSS 0.59%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-11-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-42763
Severity
HIGH
CVSS
7.5
EPSS
0.59%

Original NVD Description

Couchbase Server before 6.6.3 and 7.x before 7.0.2 stores Sensitive Information in Cleartext. The issue occurs when the cluster manager forwards a HTTP request from the pluggable UI (query workbench etc) to the specific service. In the backtrace, the Basic Auth Header included in the HTTP request, has the "@" user credentials of the node processing the UI request.