couchbase_server Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/couchbase_server/ Thu, 23 Feb 2023 14:10:34 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png couchbase_server Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/couchbase_server/ 32 32 CVE-2021-35943 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-35943/ Thu, 23 Feb 2023 14:10:34 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-35943/ Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.

The post CVE-2021-35943 appeared first on CVE Vulnerability.

]]> Couchbase Server 6.5.x and 6.6.x through 6.6.2 has Incorrect Access Control. Externally managed users are not prevented from using an empty password, per RFC4513.

The post CVE-2021-35943 appeared first on CVE Vulnerability.

]]> CVE-2021-33504 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-33504/ Thu, 23 Feb 2023 14:10:01 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-33504/ Couchbase Server before 7.1.0 has Incorrect Access Control.

The post CVE-2021-33504 appeared first on CVE Vulnerability.

]]> Couchbase Server before 7.1.0 has Incorrect Access Control.

The post CVE-2021-33504 appeared first on CVE Vulnerability.

]]> CVE-2021-27925 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-27925/ Thu, 23 Feb 2023 14:08:41 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-27925/ An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the ns_server.info.log file.

The post CVE-2021-27925 appeared first on CVE Vulnerability.

]]> An issue was discovered in Couchbase Server 6.5.x and 6.6.x through 6.6.1. When using the View Engine and Auditing is enabled, a crash condition can (depending on a race condition) cause an internal user with administrator privileges, @ns_server, to have its credentials leaked in cleartext in the ns_server.info.log file.

The post CVE-2021-27925 appeared first on CVE Vulnerability.

]]> CVE-2022-42951 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-42951/ Thu, 23 Feb 2023 05:21:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-42951/ An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster manager using default credentials.

The post CVE-2022-42951 appeared first on CVE Vulnerability.

]]> An issue was discovered in Couchbase Server 6.5.x and 6.6.x before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2. During the start-up of a Couchbase Server node, there is a small window of time (before the cluster management authentication has started) where an attacker can connect to the cluster manager using default credentials.

The post CVE-2022-42951 appeared first on CVE Vulnerability.

]]> CVE-2022-42950 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-42950/ Thu, 23 Feb 2023 05:21:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-42950/ An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service.

The post CVE-2022-42950 appeared first on CVE Vulnerability.

]]> An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service.

The post CVE-2022-42950 appeared first on CVE Vulnerability.

]]> CVE-2022-34826 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-34826/ Thu, 23 Feb 2023 05:19:31 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-34826/ In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs.

The post CVE-2022-34826 appeared first on CVE Vulnerability.

]]> In Couchbase Server 7.1.x before 7.1.1, an encrypted Private Key passphrase may be leaked in the logs.

The post CVE-2022-34826 appeared first on CVE Vulnerability.

]]> CVE-2022-33911 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-33911/ Thu, 23 Feb 2023 05:19:18 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-33911/ An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.

The post CVE-2022-33911 appeared first on CVE Vulnerability.

]]> An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.

The post CVE-2022-33911 appeared first on CVE Vulnerability.

]]> CVE-2022-33173 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-33173/ Thu, 23 Feb 2023 05:19:13 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-33173/ An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead.

The post CVE-2022-33173 appeared first on CVE Vulnerability.

]]> An algorithm-downgrade issue was discovered in Couchbase Server before 7.0.4. Analytics Remote Links may temporarily downgrade to non-TLS connection to determine the TLS port number, using SCRAM-SHA instead.

The post CVE-2022-33173 appeared first on CVE Vulnerability.

]]> CVE-2022-32564 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-32564/ Thu, 23 Feb 2023 05:19:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-32564/ An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie.

The post CVE-2022-32564 appeared first on CVE Vulnerability.

]]> An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie.

The post CVE-2022-32564 appeared first on CVE Vulnerability.

]]> CVE-2022-32565 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-32565/ Thu, 23 Feb 2023 05:19:06 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-32565/ An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids.

The post CVE-2022-32565 appeared first on CVE Vulnerability.

]]> An issue was discovered in Couchbase Server before 7.0.4. The Backup Service log leaks unredacted usernames and document ids.

The post CVE-2022-32565 appeared first on CVE Vulnerability.

]]>