638 matches found
Information disclosure
Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32565
An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids...
CVE-2022-32565
CVE-2022-32565 affects Couchbase Server prior to 7.0.4. The Backup Service log discloses unredacted usernames and document IDs, constituting a log information disclosure vulnerability. Connected sources confirm the issue in Couchbase Server versions before 7.0.4 with the root cause described as a...
CVE-2022-32562
CVE-2022-32562_affects_Couchbase_Server_before_7.0.4. The issue allows operations to succeed on a collection using stale RBAC permissions, potentially enabling unauthorized access or actions despite RBAC settings. Public sources (NVD, Red Hat, CVE records) consistently describe the vulnerability ...
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...
CVE-2022-32192
Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32192
CVE-2022-32192 affects Couchbase Server 5.x through 7.x before 7.0.4 and results in exposure of sensitive information to an unauthorized actor. The connected documents consistently describe an information-disclosure vulnerability in Couchbase Server, but do not provide a concrete, publicly disclo...
CVE-2022-32564
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie...
CVE-2022-32560
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings...
CVE-2022-32560
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings...
CVE-2022-32560
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings...
CVE-2022-32564
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie...
CVE-2022-32564
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
CVE-2022-32193
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32193
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...