803 matches found
CVE-2022-33911: Insertion of Sensitive Information into Log File
An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information...
CVE-2022-33173: Undefined Security Weakness
An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead...
Couchbase Server Information Disclosure Vulnerability (CNVD-2022-67145)
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase USA, which mainly supports data query, full-text search and active global replication. couchbase Server is vulnerable to an information disclosure vulnerability, which originates from couchbase-cli that...
Couchbase Server Log Information Disclosure Vulnerability (CNVD-2022-67144)
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that supports data query, full-text search, and active global replication, etc. A log information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from a...
Couchbase Server Information Disclosure Vulnerability (CNVD-2022-67150)
Couchbase Server is a distributed NoSQL non-relational database from Couchbase USA, which primarily supports data query, full-text search, and active global replication. information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from the fact that samp...
Couchbase Server Information Disclosure Vulnerability
Couchbase Server is a distributed database from Couchbase Inc. that supports data query, full-text search, and active global replication.An information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4. The vulnerability stems from the fact that when using the...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32561
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
CVE-2022-32561
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
CVE-2022-32559
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32561
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
Input validation
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
Authentication flaw
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
Code injection
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32559
CVE-2022-32559 affects Couchbase Server prior to 7.0.4. The issue arises from handling random HTTP requests that can lead to leaked metrics, exposing potential information about the system. According to multiple connected sources, the vulnerability impacts Couchbase Server versions before 7.0.4, ...
