CVE-2023-43769: Medium severity couchbase vulnerability
Published Feb 28, 2024
·Updated
An issue was discovered in Couchbase Server through 7.1.4 before 7.1.5 and before 7.2.1. There are Unauthenticated RMI Service Ports Exposed in Analytics.
Affected Software
2 affected components
Couchbase Server<7.1.5, <7.2.1
Couchbase Couchbase Server>=6.0.0<7.2.4
Event History
Feb 28, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Feb 29, 2024
Data Sourced
via NVD·01:41 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-43769?
CVE-2023-43769 is categorized as a critical vulnerability due to the exposure of unauthenticated RMI service ports.
2
How do I fix CVE-2023-43769?
To resolve CVE-2023-43769, upgrade Couchbase Server to version 7.1.5 or 7.2.1 or later.
3
Which versions of Couchbase Server are affected by CVE-2023-43769?
Couchbase Server versions prior to 7.1.5 and 7.2.1 are affected by CVE-2023-43769.
4
What is the impact of CVE-2023-43769?
The impact of CVE-2023-43769 allows unauthorized access to RMI service ports which could lead to sensitive data exposure.
5
Is authentication required for the exposed RMI service ports in CVE-2023-43769?
No, the RMI service ports exposed by CVE-2023-43769 do not require authentication.