Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
roducts: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2022-165-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-01_IGSS_Security_Notification.pdf
CVE ID: CVE-2022-32529 State: PUBLISHED Published: 2023-01-30T00:00:00.000Z Last Updated: 2025-02-05T20:17:32.848Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Schneider Electric Products: IGSS Data Server (IGSSdataServer.exe) Problem Types: CWE-120 Description: A CWE-120: Buffer Copy without Checking Size of Input vulnerability exists that could cause a stack-based buffer overflow, potentially leading to remote code execution when an attacker sends specially crafted log data request messages. Affected Products: IGSS Data Server - IGSSdataServer.exe (Versions prior to V15.0.0.22170) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
CVE ID: CVE-2022-32530 State: PUBLISHED Published: 2022-06-24T13:00:17 Last Updated: 2024-08-03T07:46:43.411Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: Schneider Electric Products: Geo SCADA Mobile Problem Types: CWE-668 Description: A CWE-668 Exposure of Resource to Wrong Sphere vulnerability exists that could cause users to be misled, hiding alarms, showing the wrong server connection option or the wrong control request when a mobile device has been compromised by a malicious application. Affected Product: Geo SCADA Mobile (Build 222 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/fi
2 and prior) Additional Analyst Notes: - CVE Program Container: References: - https://download.schneider-electric.com/files?p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2022-165-02_Geo_SCADA_Android_App_Security_Notification.pdf
CVE ID: CVE-2022-32531 State: PUBLISHED Published: 2022-12-15T10:17:19.660Z Last Updated: 2025-04-17T18:20:47.178Z Vendors: Apache Software Foundation Products: Apache BookKeeper Problem Types: CWE-295 Description: The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/xyk2lfc7lzof8mksmwyympbqxts1b5s9
CVE ID: CVE-2022-32532 State: PUBLISHED Published: 2022-06-28T23:20:11 Last Updated: 2024-08-03T07:46:43.634Z Vendors: Apache Software Foundation Products: Apache Shiro Problem Types: CWE-863 Description: Apache Shiro before 1.9.1, A RegexRequestMatcher can be misconfigured to be bypassed on some servlet containers. Applications using RegExPatternMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/y8260dw8vbm99oq7zv6y3mzn5ovk90xh
CVE ID: CVE-2022-32533 State: PUBLISHED Published: 2022-07-06T09:40:12 Last Updated: 2024-08-03T07:46:43.528Z Vendors: Apache Software Foundation Products: Apache Portals Problem Types: CWE-79 Description: Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no updates will be provided for this issue Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/d3g248pr03x8rvmh8p2t3xdlw0wn5dz2 -
Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/d3g248pr03x8rvmh8p2t3xdlw0wn5dz2 - https://www.openwall.com/lists/oss-security/2022/07/06/1 - http://www.openwall.com/lists/oss-security/2022/07/06/1
CVE ID: CVE-2022-32534 State: PUBLISHED Published: 2022-06-22T13:55:56 Last Updated: 2024-08-03T07:46:43.351Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bosch Products: PRA-ES8P2S Problem Types: CWE-20 Description: The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html
CVE ID: CVE-2022-32535 State: PUBLISHED Published: 2022-06-22T13:55:55 Last Updated: 2024-08-03T07:46:43.473Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N) Vendors: Bosch Products: PRA-ES8P2S Problem Types: CWE-250 Description: The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html
CVE ID: CVE-2022-32536 State: PUBLISHED Published: 2022-06-22T13:55:56 Last Updated: 2024-08-03T07:46:43.564Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Bosch Products: PRA-ES8P2S Problem Types: CWE-269 Description: The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/BOSCH-SA-247052-BT.html
CVE ID: CVE-2022-32537 State: PUBLISHED Published: 2022-11-17T20:47:05.258Z Last Updated: 2025-04-29T14:44:21.348Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: Medtronic Products: Minimed 600 Series Insulin Pump Problem Types: CWE-693 Description: A vulnerability exists which could allow an unauthorized user to learn aspects of the communication protocol used to pair system components while the pump is being paired with other system components. Exploitation requires nearby wireless signal proximity with the patient and the device; advanced technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidanc
ed technical knowledge is required for exploitation. Please refer to the Medtronic Product Security Bulletin for guidance Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/uscert/ics/advisories/icsma-22-263-01 - https://global.medtronic.com/xg-en/product-security/security-bulletins/minimed-600-series-communication-issue.html
CVE ID: CVE-2022-32540 State: PUBLISHED Published: 2022-09-30T16:38:54.000Z Last Updated: 2025-05-20T16:15:31.413Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Bosch Products: BVMS, VJD-7513 Problem Types: CWE-200 Description: Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References:
CPP14 and firmware version 8.x. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.bosch.com/security-advisories/bosch-sa-464066.html
CVE ID: CVE-2022-32543 State: PUBLISHED Published: 2022-08-05T21:20:45.303Z Last Updated: 2025-04-15T18:52:33.000Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: ESTsoft Products: Alyac Problem Types: CWE-680 Description: An integer overflow vulnerability exists in the way ESTsoft Alyac 2.5.8.544 parses OLE files. A specially-crafted OLE file can lead to a heap buffer overflow which can result in arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2022-1527
CVE ID: CVE-2022-32544 State: PUBLISHED Published: 2022-08-18T07:13:37 Last Updated: 2024-08-03T07:46:44.333Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Improper Authorization Description: Operation restriction bypass vulnerability in Project of Cybozu Office 10.0.0 to 10.8.5 allows a remote authenticated attacker to alter the data of Project via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2022/007584.html - https://jvn.jp/en/jp/JVN20573662/index.html
CVE ID: CVE-2022-32545 State: PUBLISHED Published: 2022-06-16T00:00:00 Last Updated: 2024-08-03T07:46:43.464Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned char' at coders/psd.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2091811 - https://github.com/ImageMagick/ImageMagick/commit/9c9a84cec4ab28ee0b57c2b9266d6fbe68183512 - https://github.c
=2091811 - https://github.com/ImageMagick/ImageMagick/commit/9c9a84cec4ab28ee0b57c2b9266d6fbe68183512 - https://github.com/ImageMagick/ImageMagick6/commit/450949ed017f009b399c937cf362f0058eacc5fa - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2022-32546 State: PUBLISHED Published: 2022-06-16T00:00:00 Last Updated: 2024-08-03T07:46:44.812Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2091812 - https://github.com/ImageMagick/ImageMagick/commit/f221ea0fa3171f0f4fdf74ac9d81b203b9534c23 - https://github.c
=2091812 - https://github.com/ImageMagick/ImageMagick/commit/f221ea0fa3171f0f4fdf74ac9d81b203b9534c23 - https://github.com/ImageMagick/ImageMagick6/commit/29c8abce0da56b536542f76a9ddfebdaab5b2943 - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2022-32547 State: PUBLISHED Published: 2022-06-16T00:00:00 Last Updated: 2024-08-03T07:46:43.328Z Vendors: n/a Products: ImageMagick Problem Types: NA Description: In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2091813 - https://github.com/ImageMagick/ImageMagick/commit/
: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2091813 - https://github.com/ImageMagick/ImageMagick/commit/eac8ce4d873f28bb6a46aa3a662fb196b49b95d0 - https://github.com/ImageMagick/ImageMagick6/commit/dc070da861a015d3c97488fdcca6063b44d47a7b - https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html
CVE ID: CVE-2022-32548 State: PUBLISHED Published: 2022-08-29T05:38:35 Last Updated: 2024-08-03T07:46:43.481Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field. Additional Analyst Notes: - CVE Program Container: References: - https://www.securityweek.com/smbs-exposed-attacks-critical-vulnerability-draytek-vigor-routers - https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.h
bility-draytek-vigor-routers - https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/rce-in-dratyek-routers.html
CVE ID: CVE-2022-32549 State: PUBLISHED Published: 2022-06-22T14:25:10 Last Updated: 2024-08-03T07:46:43.499Z Vendors: Apache Software Foundation Products: Apache Sling Problem Types: CWE-117 Description: Apache Sling Commons Log <= 5.4.0 and Apache Sling API <= 2.25.0 are vulnerable to log injection. The ability to forge logs may allow an attacker to cover tracks by injecting fake logs and potentially corrupt log files. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/7z6h3806mwcov5kx6l96pq839sn0po1v
CVE ID: CVE-2022-32550 State: PUBLISHED Published: 2022-06-15T18:01:24 Last Updated: 2024-08-03T07:46:43.566Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AgileBits 1Password, involving the method various 1Password apps and integrations used to create connections to the 1Password service. In specific circumstances, this issue allowed a malicious server to convince a 1Password app or integration it is communicating with the 1Password service. Additional Analyst Notes: - CVE Program Container: References: - https://support.1password.com/kb/202206/
CVE ID: CVE-2022-32551 State: PUBLISHED Published: 2022-07-01T23:51:50 Last Updated: 2024-08-03T07:46:43.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml). Additional Analyst Notes: - CVE Program Container: References: - https://www.manageengine.com/products/service-desk-msp/CVE-2022-32551.html
CVE ID: CVE-2022-32552 State: PUBLISHED Published: 2022-06-22T14:22:29 Last Updated: 2024-08-03T07:46:43.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to a privilege escalation via the manipulation of Python environment variables which can be exploited by a logged-in user to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or ser
n user to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software. Additional Analyst Notes: - CVE Program Container: References: - https://support.purestorage.com/Pure_Security/Security_Bundle_2022-04-04/Security_Advisory_for_%E2%80%9Csecurity-bundle-2022-04-04
CVE ID: CVE-2022-32553 State: PUBLISHED Published: 2022-06-22T14:07:35 Last Updated: 2024-08-03T07:46:43.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to a privilege escalation via the manipulation of environment variables which can be exploited by a logged-in user to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or services a
to escape a restricted shell to an unrestricted shell with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software. Additional Analyst Notes: - CVE Program Container: References: - https://support.purestorage.com/Pure_Security/Security_Bundle_2022-04-04/Security_Advisory_for_%E2%80%9Csecurity-bundle-2022-04-04
CVE ID: CVE-2022-32554 State: PUBLISHED Published: 2022-06-22T14:25:48 Last Updated: 2024-08-03T07:46:44.639Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pure Storage FlashArray products running Purity//FA 6.2.0 - 6.2.3, 6.1.0 - 6.1.12, 6.0.0 - 6.0.8, 5.3.0 - 5.3.17, 5.2.x and prior Purity//FA releases, and Pure Storage FlashBlade products running Purity//FB 3.3.0, 3.2.0 - 3.2.4, 3.1.0 - 3.1.12, 3.0.x and prior Purity//FB releases are vulnerable to possibly exposed credentials for accessing the product’s management interface. The password may be known outside Pure Storage and could be used on an affected system, if reachable, to execute arbitrary instructions with root privile
Pure Storage and could be used on an affected system, if reachable, to execute arbitrary instructions with root privileges. No other Pure Storage products or services are affected. Remediation is available from Pure Storage via a self-serve “opt-in” patch, manual patch application or a software upgrade to an unaffected version of Purity software. Additional Analyst Notes: - CVE Program Container: References: - https://support.purestorage.com/Pure_Security/Security_Bundle_2022-04-04/Security_Advisory_for_%E2%80%9Csecurity-bundle-2022-04-04
CVE ID: CVE-2022-32555 State: PUBLISHED Published: 2022-09-13T19:29:18.000Z Last Updated: 2025-06-05T18:18:13.829Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unisys Data Exchange Management Studio before 6.0.IC2 and 7.x before 7.0.IC1 doesn't have an Anti-CSRF token to authenticate the POST request. Thus, a cross-site request forgery attack could occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://unisys.com - https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=69
CVE ID: CVE-2022-32556 State: PUBLISHED Published: 2022-07-21T11:26:59 Last Updated: 2024-08-03T07:46:43.613Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. A private key is leaked to the log files with certain crashes. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32557 State: PUBLISHED Published: 2022-06-14T16:38:25 Last Updated: 2024-08-03T07:46:43.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. The Index Service does not enforce authentication for TCP/TLS servers. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32558 State: PUBLISHED Published: 2022-06-13T20:45:46 Last Updated: 2024-08-03T07:46:43.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. Sample bucket loading may leak internal user passwords during a failure. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32559 State: PUBLISHED Published: 2022-06-14T16:38:32 Last Updated: 2024-08-03T07:46:44.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. Random HTTP requests lead to leaked metrics. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32560 State: PUBLISHED Published: 2022-06-13T20:45:40 Last Updated: 2024-08-03T07:46:44.316Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. XDCR lacks role checking when changing internal settings. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32561 State: PUBLISHED Published: 2022-06-14T16:38:13 Last Updated: 2024-08-03T07:46:44.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 6.6.5 and 7.x before 7.0.4. Previous mitigations for CVE-2018-15728 were found to be insufficient when it was discovered that diagnostic endpoints could still be accessed from the network. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32562 State: PUBLISHED Published: 2022-06-13T22:15:15 Last Updated: 2024-08-03T07:46:43.474Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. Operations may succeed on a collection using stale RBAC permission. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32563 State: PUBLISHED Published: 2022-06-10T11:57:58 Last Updated: 2024-08-03T07:46:43.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, the admin credentials provided to the Admin REST API are ignored, resulting in privilege escalation for unauthenticated users. The Public REST API is not impacted by this issue. A workaround is to replace X.509 certificate based authen
ated users. The Public REST API is not impacted by this issue. A workaround is to replace X.509 certificate based authentication with Username and Password authentication inside the bootstrap configuration. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://www.couchbase.com/alerts
CVE ID: CVE-2022-32564 State: PUBLISHED Published: 2022-06-13T20:45:34 Last Updated: 2024-08-03T07:46:43.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Couchbase Server before 7.0.4. In couchbase-cli, server-eshell leaks the Cluster Manager cookie. Additional Analyst Notes: - CVE Program Container: References: - https://forums.couchbase.com/tags/security - https://docs.couchbase.com/server/current/release-notes/relnotes.html - https://www.couchbase.com/alerts