7.3Alta
CVE-2025-52490
Descripción
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.
Debilidad (CWE):
CWE-319
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| couchbase | sync gateway | < 3.2.6 |
Referencias y parches
- https://forums.couchbase.com/tags/security Vendor Advisory
- https://docs.couchbase.com/server/current/release-notes/relnotes.html Release Notes
- https://www.couchbase.com/alerts/ Vendor Advisory
Coincidencias CPE (NVD) (1)
cpe:2.3:a:couchbase:sync_gateway:*:*:*:*:*:*:*:*< 3.2.6