777 matches found
Couchbase Server Security Vulnerability
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase Inc. that supports data querying, full-text searching and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.2.4, which stems from a private key leak in...
Couchbase Server Security Vulnerability
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase Inc. that supports data querying, full-text searching and active global replication. A security vulnerability exists in Couchbase Server before version 7.2.4, which stems from an insufficiently restricted...
Couchbase Server Security Vulnerability
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server 7.2.2 and earlier versions, which originates from a data reader th...
CVE-2023-49338
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost...
CVE-2023-45873
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
CVE-2023-45873
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
CVE-2023-49338
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost...
CVE-2023-49338
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost...
CVE-2023-45873
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
Denial of service
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
Authentication flaw
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost...
CVE-2023-49932
An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions...
CVE-2023-49932
An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions...
CVE-2024-23302
CVE-2024-23302 affects Couchbase Server prior to version 7.2.4, where a private key leak occurs in the goxdcr.log. The available sources confirm the issue and the affected product/version, but do not provide exploit details or specific remediation steps beyond the exposure described. No root-caus...
PT-2024-13137 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions through 7.1.4 before 7.1.5 and before 7.2.1 Description: An issue was discovered in Couchbase Server where Unauthenticated RMI Service Ports are Exposed in Analytics, posing a significant risk. This could allow an...
CVE-2023-50437
Couchbase Server versions prior to 7.2.4 are vulnerable to an incorrect privilege assignment (CWE-266). The root cause is that the otpCookie is displayed with full admin access on the /pools/default/serverGroups and engageCluster2 endpoints. This vulnerability could allow unauthorized administrat...
CVE-2024-23302
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log...
PT-2024-19795
Name of the Vulnerable Software and Affected Versions Couchbase Server versions prior to 7.2.4 Description The issue concerns a private key leak in the goxdcr.log file. Recommendations For versions prior to 7.2.4, update to version 7.2.4 or later to resolve the issue...