CVE-2022-32561

Опубликовано: 14 июн. 2022

Источник: nvd

CVSS3: 4.9

CVSS2: 3.5

EPSS Низкий

Описание

An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network.

Ссылки

https://docs.couchbase.com/server/current/release-notes/relnotes.html
Release Notes
Vendor Advisory
https://forums.couchbase.com/tags/security
Vendor Advisory
https://www.couchbase.com/alerts
Vendor Advisory
https://docs.couchbase.com/server/current/release-notes/relnotes.html
Release Notes
Vendor Advisory
https://forums.couchbase.com/tags/security
Vendor Advisory
https://www.couchbase.com/alerts
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*

Версия от 5.0.0 (включая) до 6.6.5 (исключая)

cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*

Версия от 7.0.0 (включая) до 7.0.4 (исключая)

EPSS

Процентиль: 64%

0.00477

Низкий

4.9 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-rw6f-4v5q-5q53