781 matches found
CVE-2023-50436
An issue was discovered in Couchbase Server before 7.2.4. nsserver admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5...
CVE-2023-43769
An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports Exposed in Analytics...
PT-2024-13941 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.2.4 Description: An issue was discovered in Couchbase Server where the otpCookie is shown with full admin access on /pools/default/serverGroups and engageCluster2. Recommendations: For versions prior to...
Couchbase Server Security Vulnerability
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server 7.2.2 and earlier versions, which originates from a user with data...
CVE-2023-45873
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
CVE-2023-49931
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted...
CVE-2023-50436
An issue was discovered in Couchbase Server before 7.2.4. nsserver admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5...
CVE-2023-49930
CVE-2023-49930 affects Couchbase Server versions before 7.2.4. The issue is that cURL calls to the "/diag/eval" API endpoint are not sufficiently restricted, enabling access that could impact confidentiality, integrity, and availability. The vulnerability is described with a high severity (CVSS v...
CVE-2023-49931
An issue was discovered in Couchbase Server prior to version 7.2.4 where SQL++ cURL calls to the /diag/eval API endpoint are not sufficiently restricted. This lack of restriction can lead to unauthorized access or actions. To remediate this vulnerability, users should update to version 7.2.4 or l...
CVE-2023-49338
Couchbase Server versions 7.1.x and 7.2.x before 7.2.4 are vulnerable to an authentication flaw where the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost do not require authentication. This oversight allows unauthorized access to sensitive system information. To resolve thi...
CVE-2023-45873
Couchbase Server versions through 7.2.2 are affected by a vulnerability where a user with data read privileges can trigger a denial of service (DoS) . By sending GetKeys requests for a large number of documents, an attacker can cause an out-of-memory (OOM) condition, triggering the OOM killer and...
CVE-2023-45873: Allocation of Resources Without Limits or Throttling
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
CVE-2023-45874
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service outage of reader threads...
CVE-2023-45874
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service outage of reader threads...
CVE-2023-50437
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2...
CVE-2023-50436
An issue exists in Couchbase Server versions 7.1.5 through 7.2.3 where ns_server admin credentials are leaked in an encoded form within the diag.log file. This vulnerability stems from insufficient protection of credentials during logging processes. To remediate this issue, users are advised to u...
PT-2024-13296 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions through 7.2.2 Description: An issue was discovered in Couchbase Server where a data reader may cause a denial of service, resulting in an outage of reader threads. Recommendations: For versions through 7.2.2, update ...
CVE-2024-23302
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log...
CVE-2023-45874
CVE-2023-45874 affects Couchbase Server up to version 7.2.2. The issue is caused by a data reader that may cause a denial of service, leading to an outage of reader threads. The CVSS base score is 4.3 (Medium) with network attack vector and low privileges required. No exploitation details are pro...