CVE-2025-49015

The Couchbase .NET SDK (client library) (versions before 3.7.1 ) fails to properly enable hostname verification for TLS certificates. This is exacerbated by a configuration option that incorrectly enabled the use of IP addresses instead of hostnames by default. This vulnerability allows an attack...