CNNVD-202507-3655 Information

CNNVD ID

CNNVD-202507-3655

CVE-2025-52490

  • CNNVD Published: 2025-07-29

Description (Chinese)

Couchbase Sync Gateway是美国Couchbase公司的一款用于通过Web进行数据访问和数据同步的安全Web网关。 Couchbase Sync Gateway 3.2.6之前版本存在安全漏洞,该漏洞源于日志中包含明文密码,可能导致信息泄露。

Description (English)

Couchbase Sync Gateway is a secure Web gateway for data access and data synchronization through Web by the United States company Couchbase. There was a security loophole in the previous version of Couchbase Sync Gateway 3.2.6, which originated from the inclusion of an explicit password in the log and could lead to the disclosure of information.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Couchbase

Published

2025-07-29

Last Modified

2026-02-24

References

https://docs.couchbase.com/server/current/release-notes/relnotes.html https://forums.couchbase.com/tags/security https://www.couchbase.com/alerts/ https://access.redhat.com/security/cve/cve-2025-52490

Patch

https://www.couchbase.com/downloads/?family=sync-gateway&_gl=118t7qth_gcl_au*MTI4MDUzMTI4OS4xNzUzODQ1MzU3

Share on: