p PatchFirst

CVE-2025-52490

CVE-2025-52490

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

CVSS 7.3 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • couchbase PyPI

    Versions
    • 0.10
    • 0.11
    • 0.11.1
    • 0.7.0
    • 0.7.1.post1
    • 0.7.2
    • 0.8.0
    • 0.8.1
    • 0.8.2
    • 0.9
    • 1.0.0
    • 1.1.0
    • 1.2.0
    • 1.2.1
    • 1.2.2
    • 1.2.3
    • 1.2.4
    • 1.2.5
    • 2.0.0
    • 2.0.1
    • 2.0.2
    • 2.0.3
    • 2.0.4
    • 2.0.5
    • 2.0.6
    • 2.0.7
    • 2.0.8
    • 2.0.9
    • 2.1.0
    • 2.1.1
    • 2.1.2
    • 2.1.3
    • 2.2.0
    • 2.2.1
    • 2.2.2
    • 2.2.3
    • 2.2.4
    • 2.2.5
    • 2.2.6
    • 2.3.0
    • 2.3.1
    • 2.3.2
    • 2.3.3
    • 2.3.4
    • 2.3.5
    • 2.4.0
    • 2.4.0a1
    • 2.4.0a2
    • 2.4.0b0
    • 2.4.0b2
    • 2.4.1
    • 2.4.2
    • 2.5.0
    • 2.5.1
    • 2.5.10
    • 2.5.11
    • 2.5.12
    • 2.5.2
    • 2.5.3
    • 2.5.4
    • 2.5.5
    • 2.5.6
    • 2.5.7
    • 2.5.8
    • 2.5.9
    • 3.0.0
    • 3.0.0a2
    • 3.0.0a3
    • 3.0.0a4
    • 3.0.0a5
    • 3.0.0a6
    • 3.0.0b1
    • 3.0.0b2
    • 3.0.0b3
    • 3.0.1
    • 3.0.10
    • 3.0.2
    • 3.0.2b1
    • 3.0.2b2
    • 3.0.2b4
    • 3.0.2b5
    • 3.0.2b6
    • 3.0.2b7
    • 3.0.2b9
    • 3.0.3
    • 3.0.3b20
    • 3.0.4
    • 3.0.4b1
    • 3.0.5
    • 3.0.6
    • 3.0.7
    • 3.0.8
    • 3.0.9
    • 3.1.0
    • 3.1.1
    • 3.1.2
    • 3.1.3
    • 3.2.0
    • 3.2.1
    • 3.2.2
    • 3.2.3
    • 3.2.4
    • 3.2.5
    • 3.2.5.dev1
    • 3.2.5rc1
    Affected ranges
    • ECOSYSTEM: < 3.2.6

    Update to 3.2.6

Original sources

Check your server →