CVE-2018-15728

Couchbase Server exposed the '/diag/eval' endpoint which by default is available on TCP/8091 and/or TCP/18091. Authenticated users that have 'Full Admin' role assigned could send arbitrary Erlang code to the 'diag/eval' endpoint of the API and the code would subsequently be executed in the underlying operating system with privileges of the user which was used to start Couchbase. Affects Version: 4.0.0, 4.1.2, 4.5.1, 5.0.0, 4.6.5, 5.0.1, 5.1.1, 5.5.0, 5.5.1. Fix Version: 6.0.0, 5.5.2

• CWE-94

• http://seclists.org/bugtraq/2018/Aug/49Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/105157Third Party Advisory, VDB Entry
• https://www.couchbase.com/resources/security#SecurityAlerts
• http://seclists.org/bugtraq/2018/Aug/49Exploit, Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/105157Third Party Advisory, VDB Entry
• https://www.couchbase.com/resources/security#SecurityAlerts

Published

Aug 24, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15720Logitech Harmony Hub before version 4.15.206 contained two h…
• CVE-2018-15721The XMPP server in Logitech Harmony Hub before version 4.15.…
• CVE-2018-15722The Logitech Harmony Hub before version 4.15.206 is vulnerab…
• CVE-2018-15723The Logitech Harmony Hub before version 4.15.206 is vulnerab…
• CVE-2018-15726The Pulse Secure Desktop (macOS) 5.3RX before 5.3R5 and 9.0R…
• CVE-2018-15727Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 …
• CVE-2018-15729An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15730An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15731An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15732An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15733An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…
• CVE-2018-15734An issue was discovered in STOPzilla AntiMalware 6.5.2.59. T…