PYSEC-2025-101

vendorUSosv

view advisory published 2025-07-29Licence: CC-BY-4.0

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-52490US	—OT elevated	0.20% (10th)	—	2025-07-29
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

references

External citations — patches, advisories, analysis.

https://docs.couchbase.com/server/current/release-notes/relnotes.htmlADVISORY
https://forums.couchbase.com/tags/securityADVISORY
https://www.couchbase.com/alerts/ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan