Vulnerability Details CVE-2024-37034
An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are negotiated with the Key-Value (KV) service using SCRAM-SHA when remote link encryption is configured for Half-Secure.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.7%
CVSS Severity
CVSS v3 Score 5.9
Products affected by CVE-2024-37034
-
cpe:2.3:a:couchbase:couchbase_server:6.0.0
-
cpe:2.3:a:couchbase:couchbase_server:6.0.1
-
cpe:2.3:a:couchbase:couchbase_server:6.0.2
-
cpe:2.3:a:couchbase:couchbase_server:6.0.3
-
cpe:2.3:a:couchbase:couchbase_server:6.0.4
-
cpe:2.3:a:couchbase:couchbase_server:6.0.5
-
cpe:2.3:a:couchbase:couchbase_server:6.5.0
-
cpe:2.3:a:couchbase:couchbase_server:6.5.1
-
cpe:2.3:a:couchbase:couchbase_server:6.5.2
-
cpe:2.3:a:couchbase:couchbase_server:6.6.0
-
cpe:2.3:a:couchbase:couchbase_server:6.6.1
-
cpe:2.3:a:couchbase:couchbase_server:6.6.2
-
cpe:2.3:a:couchbase:couchbase_server:6.6.3
-
cpe:2.3:a:couchbase:couchbase_server:6.6.6
-
cpe:2.3:a:couchbase:couchbase_server:7.0.0
-
cpe:2.3:a:couchbase:couchbase_server:7.0.1
-
cpe:2.3:a:couchbase:couchbase_server:7.0.2
-
cpe:2.3:a:couchbase:couchbase_server:7.0.3
-
cpe:2.3:a:couchbase:couchbase_server:7.0.4
-
cpe:2.3:a:couchbase:couchbase_server:7.0.5
-
cpe:2.3:a:couchbase:couchbase_server:7.1.0
-
cpe:2.3:a:couchbase:couchbase_server:7.1.1
-
cpe:2.3:a:couchbase:couchbase_server:7.1.2
-
cpe:2.3:a:couchbase:couchbase_server:7.1.3
-
cpe:2.3:a:couchbase:couchbase_server:7.1.4
-
cpe:2.3:a:couchbase:couchbase_server:7.1.5
-
cpe:2.3:a:couchbase:couchbase_server:7.2.0
-
cpe:2.3:a:couchbase:couchbase_server:7.2.1
-
cpe:2.3:a:couchbase:couchbase_server:7.2.2
-
cpe:2.3:a:couchbase:couchbase_server:7.2.3
-
cpe:2.3:a:couchbase:couchbase_server:7.2.4
-
cpe:2.3:a:couchbase:couchbase_server:7.6.0