CVE-2020-24719

CVE-2020-24719 describes a critical remote code execution (RCE) vulnerability affecting Couchbase Server versions up to 6.5.1. This flaw stems from the exposure of the Erlang magic cookie in system logs, which an attacker can leverage to attach to an Erlang node and execute arbitrary OS commands. With a CVSS score of 9.8 (Critical), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While not currently on CISA's KEV catalog or showing active community discussion, public exploit modules like the Metasploit Erlang Port Mapper Daemon Cookie RCE exist, indicating a high potential for exploitation.