CVE-2020-24719

Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the magic cookie is included in the content of the logs. An attacker can use the cookie to attach to an Erlang node and run OS level commands on the system running the Erlang node. Affects version: 6.5.1. Fix version: 6.6.0.

• CWE-78

• https://www.couchbase.com/resources/security#VulnerabilityReportingVendor Advisory
• https://www.couchbase.com/resources/security#VulnerabilityReportingVendor Advisory

Published

Nov 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24713Gophish through 0.10.1 does not invalidate the gophish cooki…7.5
• CVE-2020-24714The Scalyr Agent before 2.1.10 has Missing SSL Certificate V…9.8
• CVE-2020-24715The Scalyr Agent before 2.1.10 has Missing SSL Certificate V…9.8
• CVE-2020-24716OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execu…7.8
• CVE-2020-24717OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterpret…7.8
• CVE-2020-24718bhyve, as used in FreeBSD through 12.1 and illumos (e.g., Om…8.2
• CVE-2020-24721An issue was discovered in the GAEN (aka Google/Apple Exposu…5.7
• CVE-2020-24722An issue was discovered in the GAEN (aka Google/Apple Exposu…5.9
• CVE-2020-24723Cross Site Scripting (XSS) vulnerability in the Registration…4.8
• CVE-2020-24736Buffer Overflow vulnerability found in SQLite3 v.3.27.1 and …5.5
• CVE-2020-24739A CSRF vulnerability was found in iCMS v7.0.0 in the backgro…6.5
• CVE-2020-24740An issue was discovered in Pluck 4.7.10-dev2. There is a CSR…4.3