medium5.3
CVE-2022-33911
An issue was discovered in Couchbase Server 7.x before 7.0.4.
Impact
An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Couchbase | Couchbase Server | from 6.5.0 before 7.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.couchbase.com/server/current/release-notes/relnotes.html
- https://forums.couchbase.com/tags/security
- https://www.couchbase.com/alerts
- https://docs.couchbase.com/server/current/release-notes/relnotes.html
- https://forums.couchbase.com/tags/security
- https://www.couchbase.com/alerts