An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @ns_server, leaks credentials in cleartext in the cbcollect_info.log, debug.log, ns_couchdb.log, indexer.log, and stats.log files. NOTE: updating the product does not automatically address leaks that occurred in the past.
Advisories
Source ID Title
EUVD EUVD EUVD-2021-12538 An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @ns_server, leaks credentials in cleartext in the cbcollect_info.log, debug.log, ns_couchdb.log, indexer.log, and stats.log files. NOTE: updating the product does not automatically address leaks that occurred in the past.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-03T20:11:27.446Z

Reserved: 2021-01-21T00:00:00

Link: CVE-2021-25645

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-05-10T13:15:09.157

Modified: 2024-11-21T05:55:12.293

Link: CVE-2021-25645

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.