CVE-2025-46619

Katalog CVE

CVSS 7.6 · High EPSS 0,48%

Kerentanan Improper Access Control pada couchbase server. Skor CVSS 3.1 7.6 (High) menurut CISA ADP.

Deskripsi (NVD)

A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow.

Rincian

Terbit di NVD

30 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.6 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

0,48% peluang dieksploitasi; lebih tinggi dari 39,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://forums.couchbase.com/tags/security advisory vendor
• https://www.couchbase.com/alerts/ advisory vendor
• https://docs.couchbase.com/server/current/release-notes/relnotes.html release notes