Vulnerability Details CVE-2022-33911
An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.4%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
References
Products affected by CVE-2022-33911
-
cpe:2.3:a:couchbase:couchbase_server:6.5.0
-
cpe:2.3:a:couchbase:couchbase_server:6.5.1
-
cpe:2.3:a:couchbase:couchbase_server:6.5.2
-
cpe:2.3:a:couchbase:couchbase_server:6.6.0
-
cpe:2.3:a:couchbase:couchbase_server:6.6.1
-
cpe:2.3:a:couchbase:couchbase_server:6.6.2
-
cpe:2.3:a:couchbase:couchbase_server:6.6.3
-
cpe:2.3:a:couchbase:couchbase_server:6.6.6
-
cpe:2.3:a:couchbase:couchbase_server:7.0.0
-
cpe:2.3:a:couchbase:couchbase_server:7.0.1
-
cpe:2.3:a:couchbase:couchbase_server:7.0.2
-
cpe:2.3:a:couchbase:couchbase_server:7.0.3