PT-2022-21373 · Couchbase · Couchbase Server

Mucahit Karadag · Published 2022-06-14 · Updated 2022-06-24 · CVE-2022-32561

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Couchbase Server versions prior to 6.6.5 Couchbase Server versions 7.x prior to 7.0.4

Description An issue was discovered in the software where previous mitigations were found to be insufficient, allowing diagnostic endpoints to be accessed from the network.

Recommendations For versions prior to 6.6.5, update to version 6.6.5 or later. For versions 7.x prior to 7.0.4, update to version 7.0.4 or later.

Fix

Related Identifiers

CVE-2022-32561

Affected Products

Couchbase Server

References · 6

• https://docs.couchbase.com/server/current/release-notes/relnotes.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-32561 · Security Note
• https://osv.dev/vulnerability/CVE-2022-32561 · Vendor Advisory
• https://forums.couchbase.com/tags/security · Vendor Advisory
• https://couchbase.com/alerts · Vendor Advisory
• https://t.me/cibsecurity/44427 · Telegram Post