Vulnerability Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36107?format=api",
    "vulnerability_id": "VCID-j2eh-qvxx-gub3",
    "summary": "An issue was discovered in Couchbase Sync Gateway 3.x before 3.0.2. Admin credentials are not verified when using X.509 client-certificate authentication from Sync Gateway to Couchbase Server. When Sync Gateway is configured to authenticate with Couchbase Server using X.509 client certificates, the admin credentials provided to the Admin REST API are ignored, resulting in privilege escalation for unauthenticated users. The Public REST API is not impacted by this issue. A workaround is to replace X.509 certificate based authentication with Username and Password authentication inside the bootstrap configuration.",
    "aliases": [
        {
            "alias": "CVE-2022-32563"
        },
        {
            "alias": "PYSEC-2022-207"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27923?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27914?format=api",
            "purl": "pkg:pypi/couchbase@3.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27915?format=api",
            "purl": "pkg:pypi/couchbase@3.0.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27916?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27917?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27918?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27919?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27920?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27921?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b7",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b7"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/27922?format=api",
            "purl": "pkg:pypi/couchbase@3.0.2b9",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-bnvg-c9hg-dqas"
                },
                {
                    "vulnerability": "VCID-j2eh-qvxx-gub3"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/couchbase@3.0.2b9"
        }
    ],
    "references": [
        {
            "reference_url": "https://forums.couchbase.com/tags/security",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://forums.couchbase.com/tags/security"
        },
        {
            "reference_url": "https://www.couchbase.com/alerts",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://www.couchbase.com/alerts"
        }
    ],
    "weaknesses": [],
    "exploits": [],
    "severity_range_score": null,
    "exploitability": null,
    "weighted_severity": null,
    "risk_score": null,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-j2eh-qvxx-gub3"
}