CVE-2019-11495

CVE-2019-11495

Couchbase Server 5.1.1 generates insufficiently random numbers. The product hosts many network services by default. One of those services is an epmd service, which allows for node integration between Erlang instances. This service is protected by a single 16-character password. Unfortunately, this password is not generated securely due to an insufficient random seed, and can be reasonably brute-forced by an attacker to execute code against a remote system.

Source: CVE-2019-11495

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다