CouchDB before 3.5.3 leaks other users' replication credentials
An authenticated user can read replication credentials stored for other users in the _replicator database.
Stories per day · 30 days
1 stories, newest first · one card per story
1 stories, newest first · one card per story
An authenticated user can read replication credentials stored for other users in the _replicator database.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views