CVE-2022-33911 — Log File Information Exposure in Server

CWE-532 — Log File Information Exposure3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.4%
top 39.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Couchbase Server
Timeline
PublishedJul 12
Latest updateJul 13

Description

An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDcouchbase/couchbase_server6.5.0 — 7.0.4

🔴Vulnerability Details

2
GHSA
GHSA-34h9-hw7w-7v67: An issue was discovered in Couchbase Server 7↗2022-07-13
▶
CVEList
CVE-2022-33911: An issue was discovered in Couchbase Server 7↗2022-07-11
▶
CVE-2022-33911 — Log File Information Exposure | cvebase