Vulnerabilities > Couchbase > Couchbase Server > 4.6.3

DATE CVE VULNERABILITY TITLE RISK
2019-09-10 CVE-2019-11496 Missing Authentication for Critical Function vulnerability in Couchbase Server 4.0.0/4.6.3/5.0.0
In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication.
network
low complexity
couchbase CWE-306
6.4
6.4
2019-09-10 CVE-2019-11467 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Couchbase Server 4.6.3/5.5.0
In Couchbase Server 4.6.3 and 5.5.0, secondary indexing encodes the entries to be indexed using collatejson.
network
low complexity
couchbase CWE-119
7.8
7.8