803 matches found
CVE-2023-49932: Improper Preservation of Permissions
An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions...
CVE-2023-49932
An issue was discovered in Couchbase Server before version 7.2.4 where an attacker can bypass SQL++ N1QL cURL host restrictions . Exploitation details are not provided in the documents. No specific remediation or patch version is stated, though the vulnerability was addressed in version 7.2.4 .
CVE-2023-49931
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted...
CVE-2023-50436
An issue was discovered in Couchbase Server before 7.2.4. nsserver admin credentials are leaked in encoded form in the diag.log file. The earliest affected version is 7.1.5...
CVE-2023-49930
CVE-2023-49930 affects Couchbase Server versions before 7.2.4. The issue is that cURL calls to the "/diag/eval" API endpoint are not sufficiently restricted, enabling access that could impact confidentiality, integrity, and availability. The vulnerability is described with a high severity (CVSS v...
CVE-2023-49931
An issue was discovered in Couchbase Server prior to version 7.2.4 where SQL++ cURL calls to the /diag/eval API endpoint are not sufficiently restricted. This lack of restriction can lead to unauthorized access or actions. To remediate this vulnerability, users should update to version 7.2.4 or l...
CVE-2023-49338
Couchbase Server versions 7.1.x and 7.2.x before 7.2.4 are vulnerable to an authentication flaw where the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost do not require authentication. This oversight allows unauthorized access to sensitive system information. To resolve thi...
CVE-2023-45873
Couchbase Server versions through 7.2.2 are affected by a vulnerability where a user with data read privileges can trigger a denial of service (DoS) . By sending GetKeys requests for a large number of documents, an attacker can cause an out-of-memory (OOM) condition, triggering the OOM killer and...
CVE-2023-45873: Allocation of Resources Without Limits or Throttling
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service application exist because of the OOM killer...
CVE-2023-45874
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service outage of reader threads...
CVE-2023-45874
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service outage of reader threads...
CVE-2023-50437
An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2...
CVE-2023-50436
An issue exists in Couchbase Server versions 7.1.5 through 7.2.3 where ns_server admin credentials are leaked in an encoded form within the diag.log file. This vulnerability stems from insufficient protection of credentials during logging processes. To remediate this issue, users are advised to u...
PT-2024-13296 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions through 7.2.2 Description: An issue was discovered in Couchbase Server where a data reader may cause a denial of service, resulting in an outage of reader threads. Recommendations: For versions through 7.2.2, update ...
CVE-2024-23302
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log...
CVE-2023-45874
CVE-2023-45874 affects Couchbase Server up to version 7.2.2. The issue is caused by a data reader that may cause a denial of service, leading to an outage of reader threads. The CVSS base score is 4.3 (Medium) with network attack vector and low privileges required. No exploitation details are pro...
PT-2024-13835 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.2.4 Description: An issue was discovered in Couchbase Server where cURL calls to the "/diag/eval" API endpoint are not sufficiently restricted. Recommendations: For versions prior to 7.2.4, update to versi...
PT-2024-13295 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions through 7.2.2 Description: An issue was discovered in Couchbase Server where a data reader may cause a denial of service because of the OOM killer, leading to the application exiting. Recommendations: For versions...