Couchbase 6.x < 7.2.5 / 7.6.x < 7.6.1 Information Disclosure

#%NASL_MIN_LEVEL 80900

##
# Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(213435);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/06/13");

  script_cve_id("CVE-2024-37034");

  script_name(english:"Couchbase 6.x < 7.2.5 / 7.6.x < 7.6.1 Information Disclosure");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Couchbase installed on the remote host is 6.x, prior to 7.2.5, and 7.6.x prior to 7.6.1. 
It is, therefore, affected by an information disclosure issue. It does not ensure that credentials are 
negotiated with the Key-Value (KV) service using SCRAM-SHA when remote link encryption is configured for 
Half-Secure.  A remote attacker could perform a man-in-the-middle attack and negotiate for plain credentials.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.");
  script_set_attribute(attribute:"see_also", value:"https://www.couchbase.com/alerts/");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Couchbase version 7.2.5, 7.6.1, or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2024-37034");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(326);

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/07/26");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/07/26");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/12/30");

  script_set_attribute(attribute:"agent", value:"all");
  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:couchbase:couchbase_server");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Databases");

  script_copyright(english:"This script is Copyright (C) 2024-2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("couchbase_server_win_installed.nbin", "couchbase_server_nix_installed.nbin");
  script_require_keys("installed_sw/Couchbase Server");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::get_app_info(app:'Couchbase Server');
var constraints = [
    { 'min_version':'6.0', 'fixed_version':'7.2.5' },
    { 'min_version':'7.6.0', 'fixed_version':'7.6.1' },
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_WARNING);