Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2022-26311: Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.
CVE-2022-26311 · published 4 years ago
Summary
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.
What to do
- Update couchbase cloud_native_operator to version 2.2.3 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| couchbase | cloud_native_operator |
>= 2.2.0, < 2.2.3 cpe:2.3:a:couchbase:cloud_native_operator:*:*:*:*:*:*:*:* |
Original advisory text
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.
Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.
References
- https://docs.couchbase.com/operator/current/overview.html Product Vendor Advisory
- https://www.couchbase.com/alerts Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published10 Mar 2022
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-26311 · NVD
Track software like this
Free during beta