CVE-2024-37034

An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1

Medium · published July 26, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are negotiated with the Key-Value (KV) service using SCRAM-SHA when remote link encryption is configured for Half-Secure.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00158 · 4.6th percentile
Published
2024-07-26T00:00Z
EPSS history
Timeline
  • 26 JUL 00:00Z
    An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1
    cvelistv5