{"id":"CVE-2022-33911","aliases":["EUVD-2022-36948","GHSA-34h9-hw7w-7v67"],"status":"published","title":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in...","description":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.01044,"percentile":0.64424,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2022-07-11T12:20:54Z","modified":"2026-06-17T04:49:28Z","products":[{"vendor":"couchbase","product":"couchbase_server"}],"references":[{"url":"https://forums.couchbase.com/tags/security","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://docs.couchbase.com/server/current/release-notes/relnotes.html","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://www.couchbase.com/alerts","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33911"},{"url":"https://github.com/advisories/GHSA-34h9-hw7w-7v67"}],"sources":{"cve":[{"id":"CVE-2022-33911","description":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.","status":"published","published":"2022-07-11T12:20:54Z","modified":"2024-08-03T08:09:22.779Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-36948","description":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.","status":"published","published":"2022-07-11T12:20:54Z","modified":"2024-08-03T08:09:22Z","updated_at":"2026-11-03T03:25:29.68115Z"}],"ghsa":[{"id":"GHSA-34h9-hw7w-7v67","title":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in...","description":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.","status":"published","published":"2022-07-13T00:01:54Z","modified":"2023-01-27T05:05:34Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:42:43.440689Z"}],"nvd":[{"id":"CVE-2022-33911","description":"An issue was discovered in Couchbase Server 7.x before 7.0.4. Field names are not redacted in logged validation messages for Analytics Service. An Unauthorized Actor may be able to obtain Sensitive Information.","status":"published","published":"2022-07-12T14:15:18.653Z","modified":"2026-06-17T04:49:28.573Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:07:23.322724Z"}]}}