An issue was discovered in Couchbase Server before 7.2.x before 7.2.4. otpCookie is shown with full admin on pools/default/serverGroups and engageCluster2.
References
| Link | Resource |
|---|---|
| https://docs.couchbase.com/server/current/release-notes/relnotes.html | Release Notes |
| https://forums.couchbase.com/tags/security | Issue Tracking |
| https://www.couchbase.com/alerts/ | Vendor Advisory |
| https://docs.couchbase.com/server/current/release-notes/relnotes.html | Release Notes |
| https://forums.couchbase.com/tags/security | Issue Tracking |
| https://www.couchbase.com/alerts/ | Vendor Advisory |
Configurations
History
08 Apr 2025, 14:59
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:* | |
| First Time |
Couchbase couchbase Server
Couchbase |
|
| References | () https://docs.couchbase.com/server/current/release-notes/relnotes.html - Release Notes | |
| References | () https://forums.couchbase.com/tags/security - Issue Tracking | |
| References | () https://www.couchbase.com/alerts/ - Vendor Advisory |
21 Nov 2024, 08:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.couchbase.com/server/current/release-notes/relnotes.html - | |
| References | () https://forums.couchbase.com/tags/security - | |
| References | () https://www.couchbase.com/alerts/ - |
13 Aug 2024, 20:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-266 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.6 |
29 Feb 2024, 01:42
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-29 01:42
Updated : 2025-04-08 14:59
NVD link : CVE-2023-50437
Mitre link : CVE-2023-50437
CVE.ORG link : CVE-2023-50437
JSON object : View
Products Affected
couchbase
- couchbase_server
CWE
CWE-266
Incorrect Privilege Assignment