PT-2024-13137 · Couchbase · Couchbase Server

Published 2024-02-28 · Updated 2025-04-08 · CVE-2023-43769

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Couchbase Server versions through 7.1.4 before 7.1.5 and before 7.2.1

Description An issue was discovered in Couchbase Server where Unauthenticated RMI Service Ports are Exposed in Analytics, posing a significant risk. This could allow an attacker to escalate privileges.

Recommendations For versions through 7.1.4 before 7.1.5 and before 7.2.1, update to version 7.1.5 or 7.2.1 to resolve the issue. As a temporary workaround, consider restricting access to the Analytics Service to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2023-43769

Affected Products

Couchbase Server

References · 13

• https://osv.dev/vulnerability/CVE-2023-43769 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-43769 · Security Note
• https://couchbase.com/alerts · Vendor Advisory
• https://forums.couchbase.com/tags/security · Note
• https://twitter.com/CVEnew/status/1762940504537436267 · Twitter Post
• https://t.me/cvenotify/102536 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1763032314786025524 · Twitter Post
• https://couchbase.com/downloads · Note
• https://docs.couchbase.com/server/current/release-notes/relnotes.html · Note
• https://twitter.com/fridaysecurity/status/1763033444496371888 · Twitter Post
• https://t.me/cvenotify/118232 · Telegram Post
• https://t.me/pentestingnews/44176 · Telegram Post
• https://twitter.com/Dinosn/status/1763050390751220064 · Twitter Post