couchbase/sync_gateway · Security
Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output
- GHSA ID
- GHSA-pqhp-4xfc-hjgq
- CVE ID
- CVE-2025-52490
- Severity
- high
- Published
- Updated
- CVSS
- 7.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS v3
- 7.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.
CWEs
- CWE-319 · Cleartext Transmission of Sensitive Information