Couchbase Server 7.1.x and 7.2.x before 7.2.4 does not require authentication for the /admin/stats and /admin/vitals endpoints on TCP port 8093 of localhost.
References
| Link | Resource |
|---|---|
| https://docs.couchbase.com/server/current/release-notes/relnotes.html | Release Notes |
| https://forums.couchbase.com/tags/security | Product |
| https://www.couchbase.com/alerts/ | Vendor Advisory |
| https://docs.couchbase.com/server/current/release-notes/relnotes.html | Release Notes |
| https://forums.couchbase.com/tags/security | Product |
| https://www.couchbase.com/alerts/ | Vendor Advisory |
Configurations
History
23 Apr 2025, 16:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:* | |
| References | () https://docs.couchbase.com/server/current/release-notes/relnotes.html - Release Notes | |
| References | () https://forums.couchbase.com/tags/security - Product | |
| References | () https://www.couchbase.com/alerts/ - Vendor Advisory | |
| First Time |
Couchbase couchbase Server
Couchbase |
21 Nov 2024, 08:33
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.couchbase.com/server/current/release-notes/relnotes.html - | |
| References | () https://forums.couchbase.com/tags/security - | |
| References | () https://www.couchbase.com/alerts/ - |
07 Nov 2024, 15:35
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-276 |
28 Feb 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-28 22:15
Updated : 2025-04-23 16:25
NVD link : CVE-2023-49338
Mitre link : CVE-2023-49338
CVE.ORG link : CVE-2023-49338
JSON object : View
Products Affected
couchbase
- couchbase_server
CWE
CWE-276
Incorrect Default Permissions