PT-2023-25669 · Couchbase · Couchbase Server

CVE-2023-36667 · Publicado 2023-11-08 · Atualizado 2024-09-04

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Couchbase Server versions 7.1.4 through 7.1.4 Couchbase Server versions 7.2.0 through 7.2.0

Description The issue allows Directory Traversal.

Recommendations For Couchbase Server version 7.1.4, update to version 7.1.5 or later. For Couchbase Server version 7.2.0, update to version 7.2.1 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-36667

Produtos afetados

Couchbase Server

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-36667 · Nota de Segurança
• https://couchbase.com/alerts · Aviso do Fabricante
• https://docs.couchbase.com/server/current/release-notes/relnotes.html · Nota
• https://osv.dev/vulnerability/CVE-2023-36667 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1722368289752654026 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1722400896800157735 · Publicação no Twitter