The Couchbase .NET SDK (client library) before 3.7.1 does not properly enable hostname verification for TLS certificates. In fact, the SDK was also using IP addresses instead of hostnames due to a configuration option that was incorrectly enabled by default.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://docs.couchbase.com/server/current/release-notes/relnotes.html | Release Notes |
| https://forums.couchbase.com/tags/security | Issue Tracking |
| https://www.couchbase.com/alerts/ | Vendor Advisory |
Configurations
History
09 Jul 2025, 18:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forums.couchbase.com/tags/security - Issue Tracking | |
| References | () https://www.couchbase.com/alerts/ - Vendor Advisory | |
| References | () https://docs.couchbase.com/server/current/release-notes/relnotes.html - Release Notes | |
| CPE | cpe:2.3:a:couchbase:.net_sdk:*:*:*:*:*:*:*:* | |
| First Time |
Couchbase .net Sdk
Couchbase |
18 Jun 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-18 14:15
Updated : 2025-07-09 18:46
NVD link : CVE-2025-49015
Mitre link : CVE-2025-49015
JSON object : View
Products Affected
couchbase
- .net_sdk
CWE
No CWE.