CVE-2025-46619

CWE-284 — Improper Access Control3 documents3 sources
Severity
7.6HIGH
EPSS
0.5%
top 34.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Couchbase Couchbase Server
Timeline
PublishedApr 30

Description

A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:LExploitability: 2.8 | Impact: 4.7

Affected Packages1 packages

▶NVDcouchbase/couchbase_server2.0.0 — 7.2.7+1

🔴Vulnerability Details

2
CVEList
CVE-2025-46619: A security issue has been discovered in Couchbase Server before 7↗2025-04-30
▶
GHSA
GHSA-fv83-m6v9-qw8v: A security issue has been discovered in Couchbase Server before 7↗2025-04-30
▶