777 matches found
CVE-2022-32563
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...
CVE-2022-32563
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...
CVE-2022-32563
CVE-2022-32563 affects Couchbase Sync Gateway 3.x before 3.0.2. When configured to authenticate to Couchbase Server with X.509 client certificates, the gateway does not verify admin credentials supplied to the Admin REST API, allowing privilege escalation for unauthenticated users. The issue does...
CVE-2022-32563: Improper Certificate Validation
An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, t...
Couchbase Sync Gateway 信任管理问题漏洞
Couchbase Sync Gateway is a secure web gateway for data access and data synchronization over the web from Couchbase, Inc. A security vulnerability exists in the Couchbase Sync Gateway version 3.x, prior to version 3.0.2, which stems from the fact that administrator credentials are not validated...
Couchbase Server Illegal Authorization Vulnerability (CNVD-2022-67153)
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that primarily supports data querying, full-text search, and active global replication. versions of Couchbase Server prior to 7.1 contain an illegal authorization vulnerability that could be exploited...
PT-2022-21375
Name of the Vulnerable Software and Affected Versions Couchbase Sync Gateway versions 3.0.0 through 3.0.1 Couchbase Sync Gateway version 3.0.2 is not affected, but versions prior to 3.0.2 are vulnerable, so the correct representation is: Couchbase Sync Gateway versions prior to 3.0.2 Description ...
CVE-2021-33504
Couchbase Server before 7.1.0 has Incorrect Access Control...
CVE-2021-33504
Couchbase Server before 7.1.0 has Incorrect Access Control...
CVE-2021-33504
Couchbase Server before 7.1.0 has Incorrect Access Control...
Improper access control
Couchbase Server before 7.1.0 has Incorrect Access Control...
Couchbase Server 安全漏洞
Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that primarily supports data querying, full-text search, and active global replication. versions of Couchbase Server prior to 7.1 contain an illegal authorization vulnerability that could be exploited...
CVE-2021-33504
Couchbase Server before 7.1.0 has Incorrect Access Control...
CVE-2021-33504
CVE-2021-33504 affects Couchbase Server prior to 7.1.0, due to Incorrect Access Control/illegal authorization vulnerability. The connected Red Hat, CNVD, CNNVD, and PT-Security entries corroborate that versions before 7.1.0 are impacted and describe the issue as improper access control allowing m...
PT-2022-10268 · Couchbase · Couchbase Server
Name of the Vulnerable Software and Affected Versions: Couchbase Server versions prior to 7.1.0 Description: The issue is related to Incorrect Access Control. Recommendations: For versions prior to 7.1.0, update to version 7.1.0 or later to resolve the issue...
CVE-2021-33504: Undefined Security Weakness
Couchbase Server before 7.1.0 has Incorrect Access Control...
CVE-2022-26311
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments...
CVE-2022-26311
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments...