803 matches found
CVE-2022-32557
CVE-2022-32557 affects Couchbase Server versions prior to 7.0.4, where the Index Service does not enforce authentication for TCP/TLS servers. This creates potential unauthorized access from the network (attack vector: network, low attack complexity). The CVSS details indicate a high impact on int...
CVE-2022-32557
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32561
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
CVE-2022-32561
CVE-2022-32561 maps to an issue in Couchbase Server previously tracked under CVE-2018-15728, where the /diag/eval diagnostic endpoint could be accessed by authenticated Full Admins and allowed execution of arbitrary Erlang code on the server. Affected versions for the root cause include Couchbase...
Couchbase Server 访问控制错误漏洞
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.0.4, which stems from the indexing service not...
Couchbase Server 安全漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.0.4. No information about this vulnerability is...
PT-2022-21369 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: The issue is related to the Index Service in Couchbase Server, which does not enforce authentication for TCP/TLS servers. This lack of authentication enforcement can lead to unauthorized...
PT-2022-21373
Name of the Vulnerable Software and Affected Versions Couchbase Server versions prior to 6.6.5 Couchbase Server versions 7.x prior to 7.0.4 Description An issue was discovered in the software where previous mitigations were found to be insufficient, allowing diagnostic endpoints to be accessed fr...
Couchbase Server 安全漏洞
Couchbase Server is a distributed, open source NoSQL non-relational database from Couchbase, Inc. that supports data querying, full-text searching, and active global replication. A security vulnerability exists in Couchbase Server versions prior to 7.0.4, which stems from a random HTTP request th...
PT-2022-21371 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: An issue was discovered in Couchbase Server where random HTTP requests can lead to leaked metrics. Recommendations: For versions prior to 7.0.4, update to version 7.0.4 or later to resolve...
CVE-2022-32559: Allocation of Resources Without Limits or Throttling
An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics...
CVE-2022-32557: Missing Authentication for Critical Function
An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers...
CVE-2022-32561: Undefined Security Weakness
An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network...
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...
CVE-2022-32192
Couchbase Server 5.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...
CVE-2022-32565
An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids...
CVE-2022-32562
An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission...