CVE-2023-25016

HIGH

Couchbase Server < 6.6.6, 7.x < 7.0.5, 7.1.x < 7.1.2 - Cleartext Transmission of Sensitive Information

Title source: llm

Couchbase Server before 6.6.6, 7.x before 7.0.5, and 7.1.x before 7.1.2 exposes Sensitive Information to an Unauthorized Actor.

Core 3

Core References

Release Notes

Issue Tracking

Vendor Advisory

CVSS v3 7.5

EPSS 0.0045

EPSS Percentile 35.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

CWE

CWE-319

Status published

Products (1)

couchbase/couchbase_server 2.0.0 - 6.6.6

Published Feb 06, 2023

Tracked Since Feb 18, 2026