CVE-2024-56178

Summary

CVE-2024-56178 is a vulnerability affecting Couchbase Server versions 7.6.x through 7.6.3. This issue grants a user with the security_admin_local role the ability to create new users in groups that hold the admin role. Essentially, it allows unintended users to assume administrative privileges, posing a potential security risk to the database. Unauthorized users gaining administrative access can lead to data manipulation, unauthorized data access, or even system compromise. It is recommended that affected systems are upgraded to the latest version of Couchbase Server as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.