CVE-2022-26311

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-03-10

Last modified

2024-08-03

Affected products

• Cloud Native Operator (Couchbase)

References

• https://docs.couchbase.com/operator/current/overview.html
• https://www.couchbase.com/alerts