As part of our commitment to providing world class Enterprise Software and Support for our customers, at Couchbase we're dedicated to ensuring that you can maintain a secure deployment at all times. In addition to our public facing pages on Security, this article documents all recent security alerts which you may wish to take action on and plan to upgrade to mitigate. This table contains all recent entries from the full list maintained on our Security Alerts page.
| CVE | Synopsis | Impact (CVSS) | Products | Affects Version | Fix Version | Publish Date |
|---|---|---|---|---|---|---|
|
Full Text Search (FTS) nsstats endpoint is accessible without authentication.
The FTS stats endpoint at /api/nsstats does not implement correct authentication, so it is possible to view the names of Couchbase Server buckets, the names of FTS indexes and configuration of FTS indexes without authentication. The contents of the buckets and indexes are not exposed. |
Medium (5.3) |
Couchbase Server |
Server 7.1.3, 7.1.2, 7.1.1, 7.1.0, 7.0.x, 6.6.x |
Server 7.1.4 |
March 2023 |
Comments
0 comments
Article is closed for comments.