CVE-2025-46619

A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow.

CVSS v3 7.6 HIGH

7.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://docs.couchbase.com/server/current/release-notes/relnotes.html	Release Notes
https://forums.couchbase.com/tags/security	Vendor Advisory
https://www.couchbase.com/alerts/	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:couchbase:couchbase_server::::::::
	cpe:2.3:a:couchbase:couchbase_server::::::::

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

History

13 May 2025, 20:26

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-04-30 18:15

Updated : 2025-05-13 20:26

NVD link : CVE-2025-46619

Mitre link : CVE-2025-46619

CVE.ORG link : CVE-2025-46619

JSON object : View

Products Affected

couchbase

couchbase_server

microsoft

windows

CWE

CWE-284

Improper Access Control

{"id": "CVE-2025-46619", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 2.8}]}, "published": "2025-04-30T18:15:48.220", "references": [{"url": "https://docs.couchbase.com/server/current/release-notes/relnotes.html", "tags": ["Release Notes"], "source": "cve@mitre.org"}, {"url": "https://forums.couchbase.com/tags/security", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.couchbase.com/alerts/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A security issue has been discovered in Couchbase Server before 7.6.4 and fixed in v.7.6.4 and v.7.2.7 for Windows that could allow unauthorized access to sensitive files. Depending on the level of privileges, this vulnerability may grant access to files such as /etc/passwd or /etc/shadow."}, {"lang": "es", "value": "Se descubri\u00f3 un problema de seguridad en Couchbase Server antes de la versi\u00f3n 7.6.4, corregido en las versiones 7.6.4 y 7.2.7 para Windows, que podr\u00eda permitir el acceso no autorizado a archivos confidenciales. Seg\u00fan el nivel de privilegios, esta vulnerabilidad puede otorgar acceso a archivos como /etc/passwd o /etc/shadow."}], "lastModified": "2025-05-13T20:26:39.127", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEAF2A0D-0C23-41AA-907C-7C9DF1C34482", "versionEndExcluding": "7.2.7", "versionStartIncluding": "2.0.0"}, {"criteria": "cpe:2.3:a:couchbase:couchbase_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF33EA82-CF16-4873-B20D-D7F423BFD3E8", "versionEndExcluding": "7.6.4", "versionStartIncluding": "7.6.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}