CVE•Published 2020-02-22•1 article on news•4 live references•NVD data

CVE-2020-9039

Vulnerability data via CVEDB (Shodan)

CVSS v3.1

9.8

CRITICAL

EPSS percentile

Exploit Prediction Scoring System · top 10% of all CVEs

Description

Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The /settings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs.

Timeline

Published 2020-02-22

External references

NVD MITRE Exploit-DB VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag36 hosts

vuln:CVE-2020-9039

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product + version

product:"Couchbase Couchbase Server" version:"4.0.0"

Version-pinned fingerprint from NVD's first vulnerable CPE.

Shodan · banner/body mention

http.html:"Couchbase Server"

HTTP body or banner mentions "Couchbase Server" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2020-9039