[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsEeHq5qWe7FdFF8Wj6Ioz0RgcFnGchwYJZQZl5ld5fo":3,"g5a-risk:CVE-2020-9039":164},{"success":4,"data":5,"meta":162},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":37,"references":75,"referencesCount":81,"weaknesses":82,"weaknessesCount":81,"isActivelyExploited":91,"cisaInfo":27,"otxData":27,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":146,"notableEvents":147},"CVE-2020-9039","What is CVE-2020-9039?","Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).The \u002Fsettings REST endpoint exposed by the projector process is an endpoint that administrators can use for various tasks such as updating configuration and collecting performance profiles. The endpoint was unauthenticated and has been updated to only allow authenticated users to access these administrative APIs.","Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6.0 through 4.6.5, 5.0.0, 5.1.1, 5.5.0 and 5.5.1 have Insecure Permissions for the projector and indexe...","2020-02-22T02:15:10.617","2022-01-01T19:45:16.78",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.03939,[39,39,39,39,39,39,39],"Critical",[43,48,51,54,57,60,63,66,69,72],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"couchbase","couchbase_server","*","cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"4.0.0","cpe:2.3:a:couchbase:couchbase_server:4.0.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":52,"criteria":53,"vulnerable":4},"4.1.0","cpe:2.3:a:couchbase:couchbase_server:4.1.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":55,"criteria":56,"vulnerable":4},"4.1.1","cpe:2.3:a:couchbase:couchbase_server:4.1.1:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":58,"criteria":59,"vulnerable":4},"4.5.0","cpe:2.3:a:couchbase:couchbase_server:4.5.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":61,"criteria":62,"vulnerable":4},"4.5.1","cpe:2.3:a:couchbase:couchbase_server:4.5.1:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":64,"criteria":65,"vulnerable":4},"5.0.0","cpe:2.3:a:couchbase:couchbase_server:5.0.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":67,"criteria":68,"vulnerable":4},"5.1.1","cpe:2.3:a:couchbase:couchbase_server:5.1.1:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":70,"criteria":71,"vulnerable":4},"5.5.0","cpe:2.3:a:couchbase:couchbase_server:5.5.0:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":73,"criteria":74,"vulnerable":4},"5.5.1","cpe:2.3:a:couchbase:couchbase_server:5.5.1:*:*:*:*:*:*:*",[76],{"url":77,"source":78,"tags":79},"https:\u002F\u002Fwww.couchbase.com\u002Fresources\u002Fsecurity#SecurityAlerts","Couchbase",[80],"Vendor Advisory",1,[83],{"id":84,"name":85,"description":86,"extendedDescription":87,"status":88,"abstraction":89,"structure":90},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2020-9039? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-9039, a critical severity cyber security vulnerability from 2020. Couchbase Server 4.0.0, 4.1.0, 4.1.1, 4.5.0, 4.5.1, 4.6....","CVE-2020-9039, CVE-2020-9039 vulnerability, CVE-2020-9039 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, couchbase security, couchbase_server vulnerability","\u002Fwhat-is\u002Fcve-2020-9039",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-9039","Cybersecurity","CVE-2020-9039, CVE-2020-9039 vulnerability, CVE-2020-9039 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":27,"Negate":27,"Nodes":120},[121],{"Operator":122,"Negate":27,"CPEMatch":123},"OR",[124,128,130,132,134,136,138,140,142,144],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":126,"VersionEndExcluding":27,"VersionEndIncluding":127},"D9C2B2CC-E977-46ED-BB24-B389CD74E11F","4.6.0","4.6.5",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":129,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2A7E985C-D948-477B-8FDC-0871EC4FCA99",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"EFC3ED67-FB26-4DBB-B930-DD45B361A3A1",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":133,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"4B6D0276-99C9-40E0-9CAB-FEE3F83D9DB1",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":135,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B35376AE-929E-4295-B93A-8A9D55139404",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":137,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"27EDF1ED-FAAE-4499-9455-CE181EFC3525",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2008B5F0-AE95-4F6D-89AD-451B7E2A0341",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"58E4463C-BC06-4031-B659-DC5A0721CC81",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":143,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BFEE047D-53C8-4851-A814-57125B21E01A",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"60E6AC40-03E4-4C7E-985A-B1F3C5E7815F",[],[148,155],{"id":149,"eventType":150,"eventTime":151,"details":152,"label":153,"color":154},"7ab51538-848d-40dd-8354-cc7085809504","HIGH_EPSS_DELTA","2026-01-16T04:05:14.021012+00:00","Daily EPSS score increased by 0.452 on 2023-12-30","EPSS Score Increased","red",{"id":156,"eventType":157,"eventTime":158,"details":159,"label":160,"color":161},"5d5f6dc9-f664-4639-aac5-5867329f2b06","LOW_EPSS_DELTA","2026-01-19T04:05:18.707898+00:00","Daily EPSS score decreased by 0.150 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":163,"version":33},1792369572205,{"score":165,"band":166,"action":167,"scoredAt":168},56,"Medium","Plan remediation","2026-10-16T06:47:58.537583+00:00"]