CVE-2023-45875

An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster...

casbin-couchbase-adapter (>=0.1.3 <=0.1.4), pycouchbase (>=0.1.0.dev1 <=0.1.0b1) +1 more potentially affected by CVE-2023-45875 via couchbase (>=2.0.0 <=2.5.12)

couchbase PYPI version =2.0.0, =0.1.3, =0.1.0.dev1, =1.0.4, =2.0.2 Source cves: CVE-2023-45875 Source advisory: OSV:PYSEC-2023-235...

couchbase-mcp-server (>=0.3.1rc2 <=0.5.0), couchbase-sqlalchemy (=1.0.3) +4 more potentially affected by CVE-2023-45875 via couchbase (>=4.1.8 <=4.5.0)

couchbase PYPI version =4.1.8, =0.3.1rc2, =0.2.2.dev0, =1.0.2 - pyxi-azdo-analytics =0.0.1 - pyxi-couchbase-client =0.0.10 Source cves: CVE-2023-45875 Source advisory: OSV:PYSEC-2023-235...

CVE-2023-45875

CVE-2023-45875 affects Couchbase Server 7.2.0, where a private key leak can occur in debug.log when adding a pre-7.0 node to a 7.2 cluster. The available connected sources describe the issue and its context but do not provide a specific remediation or patched version within the documents. Practic...