CVE-2022-33911
Summary
| CVE | CVE-2022-33911 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-07-12 14:15:00 UTC |
| Updated | 2022-07-18 19:04:00 UTC |
| Description | An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information. |
Risk And Classification
Problem Types: CWE-532
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Couchbase | Couchbase Server | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Alerts | Couchbase | MISC | www.couchbase.com | |
| docs.couchbase.com/server/current/release-notes/relnotes.html | MISC | docs.couchbase.com | |
| forums.couchbase.com/tags/security | MISC | forums.couchbase.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.