CVE-2022-26311

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Couchbase Operator 2.2.x before 2.2.3 exposes Sensitive Information to an Unauthorized Actor. Secrets are not redacted in logs collected from Kubernetes environments.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://docs.couchbase.com/operator/current/overview.htmlProduct, Vendor Advisory
https://www.couchbase.com/alertsVendor Advisory
https://docs.couchbase.com/operator/current/overview.htmlProduct, Vendor Advisory
https://www.couchbase.com/alertsVendor Advisory

Timeline

Published: Mar 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-263139.8A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In certain configurations o CVE-2022-263149.8A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix Forgot Password Apps CVE-2022-263155.3qrcp through 0.8.4, in receive mode, allows ../ Directory Traversal via the file name specified by the uploader.CVE-2022-263176.5A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the result of a complete CVE-2022-263189.8On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fire CVE-2022-263196.5An installer search patch element vulnerability in Trend Micro Portable Security 3.0 Pro, 3.0 and 2.0 could allow a local attacker to place CVE-2022-263209.1The Rambus SafeZone Basic Crypto Module before 10.4.0, as used in certain Fujifilm (formerly Fuji Xerox) devices before 2022-03-01, Canon im CVE-2022-263227.5Possible Insertion of Sensitive Information into Log File Vulnerability in Identity Manager has been discovered in OpenText™ Identity Mana CVE-2022-263238.7Incorrect Use of Privileged APIs vulnerability in OpenText™ Operations Bridge Manager, OpenText™ Operations Bridge Suite (Containerized), Op CVE-2022-263245.4Possible XSS in iManager URL for access Component has been discovered in OpenText™ iManager 3.2.6.0000.CVE-2022-263256.1Reflected Cross Site Scripting (XSS) vulnerability in NetIQ Access Manager prior to 5.0.2 CVE-2022-263266.1Potential open redirection vulnerability when URL is crafted in specific format in NetIQ Access Manager prior to 5.0.2