In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication.Referenceshttps://forums.couchbase.com/tags/securityhttps://www.couchbase.com/downloadshttps://docs.couchbase.com/server/current/release-notes/relnotes.htmlhttps://www.couchbase.com/alerts/