Couchbase .NET SDK (client library) does not properly enable hostname verification for TLS certificates

The Couchbase .NET SDK client library before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default...

CVE-2025-49015

The Couchbase .NET SDK (client library) (versions before 3.7.1 ) fails to properly enable hostname verification for TLS certificates. This is exacerbated by a configuration option that incorrectly enabled the use of IP addresses instead of hostnames by default. This vulnerability allows an attack...

CVE-2002-1962

Finjan Software SurfinGate 6.0 and 6.0 1 allows remote attackers to bypass URL access restrictions via a URL with an IP address instead of a hostname...