Skip to content
OpenAdvisories

Package · PyPI

couchbase

3 known vulnerabilities.

3 results · Feed

  • High 7.3

    Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

    An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

  • High 7.5

    An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node…

  • Critical 9.8

    Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication

    An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Ser…