deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-8766
Published: 2020-11-12
Description: Improper conditions check in the Intel(R) SGX DCAP software before version 1.6 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00398; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00398
CVE: CVE-2020-8767
Published: 2020-11-12
Description: Uncaught exception in the Intel(R) 50GbE IP Core for Intel(R) Quartus Prime before version 20.2 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-755
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00400; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00400
CVE: CVE-2020-0572
Published: 2020-11-12
Description: Improper input validation in the firmware for Intel(R) Server Board S2600ST and S2600WF families may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00439; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00439
CVE: CVE-2020-0573
Published: 2020-11-12
Description: Out of bounds read in the Intel CSI2 Host Controller driver may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00427; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00427
CVE: CVE-2020-12315
Published: 2020-11-12
Description: Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00412; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00412
CVE: CVE-2020-12316
Published: 2020-11-12
Description: Insufficiently protected credentials in the Intel(R) EMA before version 1.3.3 may allow an authorized user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00412; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00412
CVE: CVE-2020-12320
Published: 2020-11-12
Description: Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00413; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00413
CVE: CVE-2020-12323
Published: 2020-11-12
Description: Improper input validation in the Intel(R) ADAS IE before version ADAS_IE_1.0.766 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00415; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00415
CVE: CVE-2020-12324
Published: 2020-11-12
Description: Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422
CVE: CVE-2020-12325
Published: 2020-11-12
Description: Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422
CVE: CVE-2020-12326
Published: 2020-11-12
Description: Improper initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422
CVE: CVE-2020-12327
Published: 2020-11-12
Description: Insecure default variable initialization in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-1188
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422
CVE: CVE-2020-12328
Published: 2020-11-12
Description: Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00422
CVE: CVE-2020-12329
Published: 2020-11-12
Description: Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00423; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00423
CVE: CVE-2020-12330
Published: 2020-11-12
Description: Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00416; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00416
CVE: CVE-2020-12331
Published: 2020-11-12
Description: Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00418; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00418
CVE: CVE-2020-12332
Published: 2020-11-12
Description: Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00421; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00421
CVE: CVE-2020-12333
Published: 2020-11-12
Description: Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00420; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00420
CVE: CVE-2020-12334
Published: 2020-11-12
Description: Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00417; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00417
CVE: CVE-2020-12335
Published: 2020-11-12
Description: Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00419; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00419
CVE: CVE-2020-12336
Published: 2020-11-12
Description: Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1188
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414
CVE: CVE-2020-12337
Published: 2020-11-12
Description: Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414
CVE: CVE-2020-12345
Published: 2020-11-12
Description: Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430
CVE: CVE-2020-12346
Published: 2020-11-12
Description: Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00431; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00431
CVE: CVE-2020-12347
Published: 2020-11-12
Description: Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430
CVE: CVE-2020-12349
Published: 2020-11-12
Description: Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430
CVE: CVE-2020-12350
Published: 2020-11-12
Description: Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00429; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00429
CVE: CVE-2020-12353
Published: 2020-11-12
Description: Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430
CVE: CVE-2020-16273
Published: 2020-11-12
Description: In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by a stack-underflow attack in v8-M TrustZone based processors. An attacker can cause a change to the stack pointer used by the Secure World from a non-secure application if the stack is not initialized. This vulnerability affects only the software that is based on Armv8-M processors with the Security Extension.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://developer.arm.com/support/arm-security-updates/armv8-m-stack-sealing; https://developer.arm.com/support/arm-security-updates/armv8-m-stack-sealing
CVE: CVE-2020-24454
Published: 2020-11-12
Description: Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00446; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00446
CVE: CVE-2020-24456
Published: 2020-11-12
Description: Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00447; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00447
CVE: CVE-2020-24460
Published: 2020-11-12
Description: Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00449; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00449
CVE: CVE-2020-24525
Published: 2020-11-12
Description: Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://seclists.org/fulldisclosure/2020/Nov/26; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00414; http://seclists.org/fulldisclosure/2020/Nov/26
CVE: CVE-2020-26803
Published: 2020-11-12
Description: In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious files using this functionality and control the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://fatihhcelik.blogspot.com/2020/10/sentrifugo-version-32-rce-authenticated_6.html; https://fatihhcelik.blogspot.com/2020/10/sentrifugo-version-32-rce-authenticated_6.html
CVE: CVE-2020-26804
Published: 2020-11-12
Description: In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users can upload attachments with the shared announcements. This "Upload Attachment" functionality is suffered from "Unrestricted File Upload" vulnerability so attacker can upload malicious files using this functionality and control the server.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: https://fatihhcelik.blogspot.com/2020/10/sentrifugo-version-32-rce-authenticated.html; https://fatihhcelik.blogspot.com/2020/10/sentrifugo-version-32-rce-authenticated.html
CVE: CVE-2020-26805
Published: 2020-11-12
Description: In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetails/edit/userid/2. In this POST request, "employeeNumId" parameter is affected by SQLi vulnerability. Attacker can inject SQL commands into query, read data from database or write data into the database.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://fatihhcelik.blogspot.com/2020/10/sentrifugo-version-32-sqli.html; https://fatihhcelik.blogspot.com/2020/10/sentrifugo-version-32-sqli.html
CVE: CVE-2020-27385
Published: 2020-11-12
Description: Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote attacker to read and write to existing files outside the web root. The files can be accessed via directory traversal, i.e., by entering a .. (dot dot) path such as ..\..\..\..\..\<file> in the input field of the FileEditor. In FlexDotnetCMS before v1.5.8, it is also possible to access files by specifying the full path (e.g., C:\<file>). The files can then be edited via the FileEditor.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: https://blog.vonahi.io/whats-in-a-re-name/; https://github.com/MacdonaldRobinson/FlexDotnetCMS/releases/tag/v1.5.11; https://blog.vonahi.io/whats-in-a-re-name/
CVE: CVE-2020-27386
Published: 2020-11-12
Description: An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and execute arbitrary files by using the FileManager to upload malicious code (e.g., ASP code) in the form of a safe file type (e.g., a TXT file), and then using the FileEditor (in v1.5.8 and prior) or the FileManager's rename function (in v1.5.7 and prior) to rename the file to an executable extension (e.g., ASP), and finally executing the file via an HTTP GET request to /<path_to_file>.
CVSS Score: 8.8 (HIGH)
CWE: CWE-434
References: http://packetstormsecurity.com/files/160411/FlexDotnetCMS-1.5.8-Arbitrary-ASP-File-Upload.html; https://blog.vonahi.io/whats-in-a-re-name/; https://github.com/MacdonaldRobinson/FlexDotnetCMS/releases/tag/v1.5.9
CVE: CVE-2020-8669
Published: 2020-11-12
Description: Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00430
CVE: CVE-2020-12912
Published: 2020-11-12
Description: A potential vulnerability in the AMD extension to Linux "hwmon" service may allow an attacker to use the Linux-based Running Average Power Limit (RAPL) interface to show various side channel attacks. In line with industry partners, AMD has updated the RAPL interface to require privileged access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-749, CWE-203
References: https://www.amd.com/en/corporate/product-security; https://www.amd.com/en/corporate/product-security
CVE: CVE-2020-12926
Published: 2020-11-12
Description: The Trusted Platform Modules (TPM) reference software may not properly track the number of times a failed shutdown happens. This can leave the TPM in a state where confidential key material in the TPM may be able to be compromised. AMD believes that the attack requires physical access of the device because the power must be repeatedly turned on and off. This potential attack may be used to change confidential information, alter executables signed by key material in the TPM, or create a denial of service of the device.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.amd.com/en/corporate/product-security; https://www.amd.com/en/corporate/product-security
CVE: CVE-2020-12927
Published: 2020-11-12
Description: A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system.
CVSS Score: 7.8 (HIGH)
CWE: CWE-749
References: https://www.amd.com/en/corporate/product-security; https://www.amd.com/en/corporate/product-security
CVE: CVE-2020-13774
Published: 2020-11-12
Description: An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations on the uploaded image, which upon failure will leave the temporarily created files in an accessible location on the server.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-434
References: https://labs.jumpsec.com/advisory-cve-2020-13774-ivanti-uem-rce/; https://labs.jumpsec.com/advisory-cve-2020-13774-ivanti-uem-rce/
CVE: CVE-2020-15783
Published: 2020-11-12
Description: A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Sending multiple specially crafted packets to the affected devices could cause a Denial-of-Service on port 102. A cold restart is required to recover the service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf; https://cert-portal.siemens.com/productcert/pdf/ssa-492828.pdf
CVE: CVE-2020-28414
Published: 2020-11-12
Description: A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (different vector than CVE-2020-28415).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://compassplus.com/solutions/tranzware/; https://github.com/jet-pentest/CVE-2020-28414/blob/main/README.md; https://compassplus.com/solutions/tranzware/
CVE: CVE-2020-28415
Published: 2020-11-12
Description: A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (different vector than CVE-2020-28414).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://compassplus.com/solutions/tranzware/; https://github.com/jet-pentest/CVE-2020-28415/blob/main/README.md; https://compassplus.com/solutions/tranzware/
CVE: CVE-2020-13877
Published: 2020-11-12
Description: SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/807698439/v1.8+HF+1+2+3+OnPrem+v5.3; https://www.resourcexpress.com/news/; https://resourcexpress.atlassian.net/wiki/spaces/RSG/pages/807698439/v1.8+HF+1+2+3+OnPrem+v5.3
CVE: CVE-2020-17494
Published: 2020-11-12
Description: Untangle Firewall NG before 16.0 uses MD5 for passwords.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-326
References: https://github.com/untangle/ngfw_src/blob/1d232efe2c17a8838b59bbbeaf166dafa94676af/uvm/hier/usr/share/untangle/web/auth/index.py#L196-L200; https://github.com/untangle/ngfw_src/search?q=author%3Abmastbergen+committer-date%3A2020-08-10&type=commits; https://pastebin.com/s7UYG3vX
CVE: CVE-2020-24719
Published: 2020-11-12
Description: Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://www.couchbase.com/resources/security#VulnerabilityReporting; https://www.couchbase.com/resources/security#VulnerabilityReporting