PT-2025-31263 · Couchbase · Couchbase Sync Gateway

Published 2025-07-29 · Updated 2025-07-29 · CVE-2025-52490

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Couchbase Sync Gateway versions prior to 3.2.6

Description An issue was discovered where cleartext passwords were present in both redacted and unredacted output within the sgcollect info options.log and sync gateway.log files.

Recommendations Update to a version newer than 3.2.6.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2025-52490

PYSEC-2025-101

Affected Products

Couchbase Sync Gateway

References · 9

• https://osv.dev/vulnerability/PYSEC-2025-101 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-52490 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-52490 · Security Note
• https://forums.couchbase.com/tags/security · Vendor Advisory
• https://couchbase.com/alerts · Vendor Advisory
• https://t.me/CVEtracker/28701 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1950333551427076274 · Twitter Post
• https://twitter.com/CVEnew/status/1950296803955404811 · Twitter Post
• https://docs.couchbase.com/server/current/release-notes/relnotes.html · Note