CVE-2022-26311: High severity couchbase vulnerability
Published Mar 7, 2022
·Updated
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.
Affected Software
1 affected component
Couchbase Cloud Native Operator>=2.2.0<2.2.3
Event History
Mar 7, 2022
CVE Published
via MITRE·08:44 PM
Data Sourced
via MITRE·08:44 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2022-26311.
2
What is the title of this vulnerability?
The title of this vulnerability is Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor.
3
What is the severity level of CVE-2022-26311?
The severity level of CVE-2022-26311 is high with a score of 7.5 out of 10.
4
How does CVE-2022-26311 impact Couchbase Operator 2.2.x before 2.2.3?
CVE-2022-26311 exposes sensitive information to an unauthorized actor. Secrets are not redacted in logs collected from Kubernetes environments.
5
How can I fix CVE-2022-26311?
To fix CVE-2022-26311, update to Couchbase Operator version 2.2.3 or later.