CVE-2018-15728

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2

CVSS v3.0

8.8 HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

2.92% chance of exploitation in the next 30 days, 86th percentile

Published

2018-08-24

Updated

2024-08-05

Proof-of-concept exploits (1)

• http://seclists.org/bugtraq/2018/Aug/49

References

• CVE Record
• NVD entry

Related

• CVE-2018-15727
• CVE-2018-15729
• CVE-2018-15723
• CVE-2018-15730
• CVE-2018-15721
• CVE-2018-15731