CVE-2024-37034

published 2024-07-26

CVE-2024-37034: An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are negotiated with the Key-Value (KV)…

Priority P4 31 medium 5.9 CVSS 3.1

AV N AC H PR N UI N S U C H I N A N

An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are negotiated with the Key-Value (KV) service using SCRAM-SHA when remote link encryption is configured for Half-Secure.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
couchbase	couchbase_server	—	—
couchbase	couchbase_server	>= 6.0.0 < 7.2.5	7.2.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-326