803 matches found
CVE-2022-32193
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
CVE-2022-32193
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
Design/Logic Flaw
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
Code injection
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings...
Information disclosure
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
Design/Logic Flaw
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie...
CVE-2022-32193
Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor...
CVE-2022-32193
CVE-2022-32193 affects Couchbase Server 6.6.x through 7.x, prior to version 7.0.4, where an information‑disclosure vulnerability exposes sensitive data to an unauthorized actor. The issue is rooted in the server stack described in public CVE summaries; confirmed references indicate an unauthorize...
CVE-2022-32558
CVE-2022-32558 affects Couchbase Server prior to 7.0.4. The issue arises during sample bucket loading, where a failure may disclose internal user passwords. The connected sources reiterate this information disclosure vector and the impact (confidentiality of passwords) but do not provide explicit...
CVE-2022-32558
An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure...
CVE-2022-32560
An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings...
CVE-2022-32560
CVE-2022-32560 affects Couchbase Server versions before 7.0.4. The root cause is XDCR lacking role checking when changing internal settings, potentially allowing unauthorized modification within XDCR configuration. Documented impact indicates potential integrity concerns (I: HIGH) with no confide...
CVE-2022-32564
An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie...
CVE-2022-32564
CVE-2022-32564 affects Couchbase Server prior to 7.0.4. The issue resides in couchbase-cli’s server-eshell, which leaks the Cluster Manager cookie, enabling information disclosure via command-line cookie exposure. Multiple connected sources (NVD/CNNVD/Red Hat/CVEs) describe the vulnerability as a...
Couchbase Server 信息泄露漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase USA, which mainly supports data query, full-text search and active global replication. couchbase Server is vulnerable to an information disclosure vulnerability, which originates from couchbase-cli that...
Couchbase Server 安全漏洞
Couchbase Server is a distributed NoSQL non-relational database from Couchbase USA, which primarily supports data query, full-text search, and active global replication. information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from the fact that samp...
PT-2022-21144
Name of the Vulnerable Software and Affected Versions Couchbase Server versions 5.x through 7.x before 7.0.4 Description The issue exposes sensitive information to an unauthorized actor. Recommendations For Couchbase Server versions 5.x through 7.x before 7.0.4, update to version 7.0.4 or later t...
PT-2022-21372 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.0.4 Description: An issue was discovered in Couchbase Server where XDCR lacks role checking when changing internal settings. Recommendations: For versions prior to 7.0.4, update to version 7.0.4 or later t...
