CVE-2021-27924

—

CVSS 3.1

5.9 medium

EPSS

<1%p44

Published

May 19, 2021 (May 19, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires.

Vendors: couchbase
Products: couchbase server
Weakness: CWE-319
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.