Couchbase Server Security Vulnerabilities and Issues — Couchbase Server CVE List

Lucene search

CouchbaseCouchbase Server

4 matches found

CVE•added 2022/07/21 12:15 p.m.•57 views

CVE-2022-32556

An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes.

7.5CVSS7.4AI score0.00478EPSS

CVE•added 2022/07/15 12:15 p.m.•50 views

CVE-2022-34826

In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs.

5.9CVSS5.7AI score0.00399EPSS

CVE•added 2022/07/12 2:15 p.m.•44 views

CVE-2022-33911

An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.

5.3CVSS5.1AI score0.00456EPSS

CVE•added 2022/07/12 2:15 p.m.•25 views

CVE-2022-33173

An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead.

7.5CVSS7.5AI score0.00478EPSS