CVE-2024-56178 Privilege escalation in n/a
A user with security_admin_local role can escalate privileges by creating a new user with admin role in Couchbase Server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-56178?
CVE-2024-56178 is a medium-severity vulnerability in Couchbase Couchbase Server, published on 27 Jan 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An issue was discovered in Couchbase Server 7.6.x through 7.6.3. A user with the security_admin_local role can create a new user in a group that has the admin role.
Weakness: CWE-281
Which versions are affected by CVE-2024-56178?
It affects 1 product.
Products include Couchbase Couchbase Server.
How do I fix CVE-2024-56178?
No fix has been published for CVE-2024-56178 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-56178 being exploited?
There is no known exploitation of CVE-2024-56178 in the wild and no public exploit code.
Other vulnerabilities in Couchbase Couchbase Server
Sources
Also known as GHSA-97mv-g3jg-wg68.