What is GHSA-pqhp-4xfc-hjgq?

GHSA-pqhp-4xfc-hjgq is a security advisory published by GitHub Security Advisories with High severity. Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

Which CVE IDs does GHSA-pqhp-4xfc-hjgq cover?

GHSA-pqhp-4xfc-hjgq covers the following CVE IDs: CVE-2025-52490. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pqhp-4xfc-hjgq?

GHSA-pqhp-4xfc-hjgq has a CVSS v3 base score of 7.3, published by GitHub Security Advisories.

Which products are affected by GHSA-pqhp-4xfc-hjgq?

GHSA-pqhp-4xfc-hjgq affects 1 product, including: go/github.com/couchbase/sync_gateway:\u003c 3.2.6.

GHSA-pqhp-4xfc-hjgqHighCVSS 7.3

Couchbase Sync Gateway shows cleartext passwords in redacted and unredacted output

Vendor

GitHub Security Advisories

Published

July 29, 2025

Last Modified

June 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-52490 →

📋 Description

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollect_info_options.log and sync_gateway.log, there are cleartext passwords in redacted and unredacted output.

🎯 Affected products1

go/github.com/couchbase/sync_gateway:< 3.2.6

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2025-52490
https://docs.couchbase.com/server/current/release-notes/relnotes.html
https://forums.couchbase.com/tags/security
https://www.couchbase.com/alerts
https://github.com/advisories/GHSA-pqhp-4xfc-hjgq