GHSA-pqhp-4xfc-hjgq

ghsaUSosv

Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

view advisory published 2025-07-29Licence: CC-BY-4.0

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-52490US	—OT elevated	0.20% (10th)	—	2025-07-29
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

references

External citations — patches, advisories, analysis.

https://docs.couchbase.com/server/current/release-notes/relnotes.htmlWEB
https://forums.couchbase.com/tags/securityWEB
https://github.com/couchbase/sync_gatewayPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2025-52490ADVISORY
https://www.couchbase.com/alertsWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan