← Database

CVE-2021-35943

CRITICAL CVSS: 9.8 Published: 2021-09-29 Modified: 2026-06-17

Description

Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.

Affected Platforms

Couchbase Couchbase Server

Weakness Type

CWE-287

References