Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2021-25644

An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators.

  • Published: May 19, 2021
  • Updated: Nov 16, 2025
  • CVE: CVE-2021-25644
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
couchbase / couchbase_server 7.0.0-beta 7.0.0-beta.x
couchbase / couchbase_server 5.0.0 6.6.1.x