Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2024-23302: Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.
CVE-2024-23302 · published 2 years ago
Summary
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.
What to do
- Update couchbase couchbase_server to version 7.2.4 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| couchbase | couchbase_server |
< 7.2.4 cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:* |
Original advisory text
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.
Couchbase Server before 7.2.4 has a private key leak in goxdcr.log.
References
- https://docs.couchbase.com/server/current/release-notes/relnotes.html Release Notes
- https://forums.couchbase.com/tags/security Issue Tracking
- https://www.couchbase.com/alerts/ Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker partial control
Type
CWE-200Information Exposure
Timeline
Published29 Feb 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-23302 · NVD
Track software like this
Free during beta