VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Jul 26, 2024· Updated Jun 17, 2026

CVE-2024-37034

CVE-2024-37034

Description

An issue was discovered in Couchbase Server before 7.2.5 and 7.6.0 before 7.6.1. It does not ensure that credentials are negotiated with the Key-Value (KV) service using SCRAM-SHA when remote link encryption is configured for Half-Secure.

Affected products

4
  • Couchbase/Couchbase Server2 versions
    cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*range: >=6.0.0,<7.2.5
    • cpe:2.3:a:couchbase:couchbase_server:7.6.0:*:*:*:*:*:*:*
  • Couchbase/Serverdescription
  • Couchbase/Serverllm-fuzzy
    Range: <7.2.5, 7.6.0 < 7.6.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.