-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from missing admin credential validation in the X.509 authentication flow. Key functions would be those handling: 1) Admin API request authentication entry points, 2) Certificate-based auth processing that should trigger credential checks, and 3) The admin API handler itself. The confidence levels reflect that while exact function names aren't visible in patches, the vulnerability pattern strongly suggests authentication workflow functions would appear in stack traces during exploitation when X.509 is configured.
PythonPython| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| couchbase | pip | >= 3.0.0, < 3.0.2 | 3.0.2 |
Ongoing coverage of React2Shell