CVE Vulnerability

couchbase_server

CVE-2022-32560

by

An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings.

CVE-2022-32559

by

An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics.

CVE-2022-32558

by

An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure.

CVE-2022-32557

by

An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers.

CVE-2022-32556

by

An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes.

CVE-2022-32193

by

Couchbase Server 6.6.x through 7.x before 7.0.4 exposes Sensitive Information to an Unauthorized Actor.