Couchbase Server vulnerabilities, page 3
63 vulnerabilities
Known vulnerabilities in Couchbase Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2019-11496couchbasecouchbase_server
EPSS score1.41%
In versions of Couchbase Server prior to 5.0, the bucket named "default" was a special bucket that allowed read and write access without authentication. As part of 5.0, the behavior of all buckets including "default" were changed to only allow access by authenticated users with sufficient authorization. However, users were allowed unauthenticated and unauthorized access to the "default" bucket if the properties of this bucket were edited. This has been fixed in versions 5.1.0 and 5.5.0.CVE-2019-11495couchbasecouchbase_serverEPSS score2.14%
In Couchbase Server 5.1.1, the cookie used for intra-node communication was not generated securely. Couchbase Server uses erlang:now() to seed the PRNG which results in a small search space for potential random seeds that could then be used to brute force the cookie and execute code against a remote system. This has been fixed in version 6.0.0.CVE-2019-11465couchbasecouchbase_serverEPSS score1.17%
An issue was discovered in Couchbase Server 5.5.x through 5.5.3 and 6.0.0. The Memcached "connections" stat block command emits a non-redacted username. The system information submitted to Couchbase as part of a bug report included the usernames for all users currently logged into the system even if the log was redacted for privacy. This has been fixed (in 5.5.4 and 6.0.1) so that usernames are tagged properly in the logs and are hashed out when the logs are redacted.CVE-2019-11497couchbasecouchbase_serverEPSS score0.66%
In Couchbase Server 5.0.0, when an invalid Remote Cluster Certificate was entered as part of the reference creation, XDCR did not parse and check the certificate signature. It then accepted the invalid certificate and attempted to use it to establish future connections to the remote cluster. This has been fixed in version 5.5.0. XDCR now checks the validity of the certificate thoroughly and prevents a remote cluster reference from being created with an invalid certificate.CVE-2019-11464couchbasecouchbase_serverEPSS score0.85%
Some enterprises require that REST API endpoints include security-related headers in REST responses. Headers such as X-Frame-Options and X-Content-Type-Options are generally advisable, however some information security professionals additionally look for X-Permitted-Cross-Domain-Policies and X-XSS-Protection, which are more generally applicable to HTML endpoint, to be included too. These headers were not included in Couchbase Server 5.5.0 and 5.1.2 . They are now included in version 6.0.2 in responses from the Couchbase Server Views REST API (port 8092).CVE-2019-11466couchbasecouchbase_serverEPSS score1.11%
In Couchbase Server 6.0.0 and 5.5.0, the eventing service exposes system diagnostic profile via an HTTP endpoint that does not require credentials on a port earmarked for internal traffic only. This has been remedied in version 6.0.1 and now requires valid credentials to access.CVE-2023-2033couchbasecouchbase_server+5KEVEPSS score40.80%
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)CVE-2023-36667couchbasecouchbase_serverEPSS score1.00%
Couchbase Server 7.1.4 before 7.1.5 and 7.2.0 before 7.2.1 allows Directory Traversal.CVE-2023-25016couchbasecouchbase_serverEPSS score0.45%
Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor.CVE-2023-43768couchbasecouchbase_serverEPSS score0.75%
An issue was discovered in Couchbase Server 6.6.x through 7.2.0, before 7.1.5 and 7.2.1. Unauthenticated users may cause memcached to run out of memory via large commands.CVE-2023-43769couchbasecouchbase_serverEPSS score0.44%
An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports Exposed in Analytics.CVE-2023-45875couchbasecouchbase_server+1EPSS score0.74%
An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster.CVE-2023-45873couchbasecouchbase_serverEPSS score0.66%
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (application exist) because of the OOM killer.CVE-2023-45874couchbasecouchbase_serverEPSS score0.76%
An issue was discovered in Couchbase Server through 7.2.2. A data reader may cause a denial of service (outage of reader threads).CVE-2023-28470couchbasecouchbase_serverEPSS score0.63%
In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication.CVE-2023-49931couchbasecouchbase_serverEPSS score0.90%
An issue was discovered in Couchbase Server before 7.2.4. SQL++ cURL calls to /diag/eval are not sufficiently restricted.CVE-2023-49930couchbasecouchbase_serverEPSS score0.90%
An issue was discovered in Couchbase Server before 7.2.4. cURL calls to /diag/eval are not sufficiently restricted.CVE-2023-49932couchbasecouchbase_serverEPSS score0.53%
An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions.CVE-2023-49338couchbasecouchbase_serverEPSS score0.60%
Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost.CVE-2023-3079chainguardhyperv-daemons-generic+39KEVEPSS score37.86%
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)