CVE-2021-31158

—

CVSS 3.1

6.5 medium

EPSS

<1%p51

Published

May 19, 2021 (May 19, 2021)

Modified

Jun 17, 2026

Description

In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.

Vendors: couchbase
Products: couchbase server
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.