Vulnerabilities for couchbase

First version without a known vulnerability: 4.6.0rc2

Details

• PYSEC-2025-1012025-07-29

  An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

  Fixed in: 3.2.6

• PYSEC-2023-2352023-11-08

  An issue was discovered in Couchbase Server 7.2.0. There is a private key leak in debug.log while adding a pre-7.0 node to a 7.2 cluster.

• GHSA-9266-j9v3-q4j52022-06-11

  Couchbase Sync Gateway admin credentials not verified when using X.509 client cert authentication

  Fixed in: 3.0.2