VulnerabilityModified
CVE-2022-33911
An Unauthorized Actor may be able to obtain Sensitive Information.
MEDIUM 5.3EPSS 0.99%
Does this matter?
Lower severity and a low EPSS score (0.99%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.99% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-532
- Affected
- couchbase/couchbase server
- Source
- cve@mitre.org
References
- https://docs.couchbase.com/server/current/release-notes/relnotes.htmlRelease Notes, Vendor Advisory
- https://forums.couchbase.com/tags/securityVendor Advisory
- https://www.couchbase.com/alertsVendor Advisory
- https://docs.couchbase.com/server/current/release-notes/relnotes.htmlRelease Notes, Vendor Advisory
- https://forums.couchbase.com/tags/securityVendor Advisory
- https://www.couchbase.com/alertsVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.