Download
| Alert*
oval:org.secpod.oval:def:64159
Couchbase Server (64-bit) is installed oval:org.secpod.oval:def:86074 The host is installed with Couchbase Server 5.x through 7.x before 7.0.4 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle the process that has the master password as a process argument. Successful exploitation could allow a ... oval:org.secpod.oval:def:86075 The host is installed with Couchbase Server 6.6.0 through 6.6.3 or 7.x before 7.0.4 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle the cluster node additions in cluster manager. Successful exploitation could allow attacke ... oval:org.secpod.oval:def:86085 The host is installed with Couchbase Server 3.0.0 before 7.1.1 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle unspecified vectors. Successful exploitation could allow attackers to leak the private keys of the generated ce ... oval:org.secpod.oval:def:86077 The host is installed with Couchbase Server before 7.0.4 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle the issues in loading a sample bucket. Successful exploitation could allow attackers to use ns_server account to perf ... oval:org.secpod.oval:def:86080 The host is installed with Couchbase Server before 6.6.5 and 7.x before 7.0.4 and is prone to a http requests vulnerability. A flaw is present in the application, which fails to properly handle the issues in diag or eval diagnostic endpoints. Successful exploitation could allow attackers to manipula ... oval:org.secpod.oval:def:86083 The host is installed with Couchbase Server before 7.1.0 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle issues in the backup service. Successful exploitation could leak the audit log data into the backup_service.log which ... oval:org.secpod.oval:def:86082 The host is installed with Couchbase Server before 7.0.4 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle issues in the server-eshell command. Successful exploitation could allow attackers to perform administrative tasks in ... oval:org.secpod.oval:def:86081 The host is installed with Couchbase Server 7.x before 7.0.4 and is prone to an incorrect default permissions vulnerability. A flaw is present in the application, which fails to properly handle issues in collection-level permission in RBAC role. Successful exploitation could allows user with the rol ... oval:org.secpod.oval:def:86086 The host is installed with Couchbase Server 6.6.0 through 7.x befor 7.0.4 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to handle issue in establishing TLS connection for an Analytics Remote Link. Successful exploitation could allow attack ... oval:org.secpod.oval:def:86084 The host is installed with Couchbase Server 6.5.x through 7.x before 7.0.4 and is prone to a sensitive information disclosure vulnerability. A flaw is present in the application, which fails to redacte field messages from the logged validation messages. Successful exploitation could allow attackers ... oval:org.secpod.oval:def:86087 The host is installed with Couchbase Server 7.1.0 and is prone to an information disclosure vulnerability. A flaw is present in the application, which fails to properly handle unspecified vectors. Successful exploitation could allow attackers to perform a man in the middle attack or decrypting netwo ... oval:org.secpod.oval:def:86078 The host is installed with Couchbase Server 4.0.0 before 7.0.4 and is prone to a http request vulnerability. A flaw is present in the application, which fails to properly handle the issuess in REST API call to the cluster manager. Successful exploitation could allow attackers to send random HTTP req ... oval:org.secpod.oval:def:86076 The host is installed with Couchbase Server 4.0.0 before 7.0.4 and is prone to a Missing Authorization vulnerability. A flaw is present in the application, which fails to properly handle the network processes. Successful exploitation could allow process requests sent by unauthenticated users to modi ... oval:org.secpod.oval:def:86079 The host is installed with Couchbase Server before 7.0.4 and is prone to a improper authentication vulnerability. A flaw is present in the application, which fails to properly handle the XDCR internal settings. Successful exploitation could allow attackers to modify XDCR internal settings without an ... oval:org.secpod.oval:def:88233 The host is installed with Couchbase Server 6.6.x before 7.1.4 and is prone to an authentication bypass vulnerability. A flaw is present in the application, which fails to properly handle issues in FTS stats endpoint at /api/nsstats. Successful exploitation could allow attackers to view the names of ... |