NetSight
high7.5

CVE-2022-26311

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor.

Impact

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.

Affected products

VendorProductAffected versions
CouchbaseCloud Native Operator
from 2.2.0 before 2.2.3

References