CVE-2021-37842

7.5 highEPSS 0.6%

High (7.5) in couchbase couchbase server. EPSS 0.6% chance of exploitation in the next 30 days.

metakv in Couchbase Server 7.0.0 uses Cleartext for Storage of Sensitive Information. Remote Cluster XDCR credentials can get leaked in debug logs. Config key tombstone purging was added in Couchbase Server 7.0.0. This issue happens when a config key, which is being logged, has a tombstone purger time-stamp attached to it.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2021-11-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

couchbase:couchbase_server

References

https://docs.couchbase.com/server/current/release-notes/relnotes.html
https://www.couchbase.com/alerts
https://docs.couchbase.com/server/current/release-notes/relnotes.html
https://www.couchbase.com/alerts

Check your stack JSON