ALT-PU-2016-3267

Низкий

ALT-PU-2016-3267: package mongo update to version 3.4.0-alt1.1

Источник

errata.altlinux.org

Дата публикации

09.12.2016

Дата обновления

09.12.2016

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades mongo to version 3.4.0-alt1.1.

Устраненные уязвимости1

CVE-2016-6494

Средний 5.5

Дата публикации: 03.10.2016

CWE-200

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

CVSS 3.0

Средний 5.5

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack vector: Local
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: None

CVSS 2.0

Низкий 2.1

AV:L/AC:L/Au:N/C:P/I:N/A:N

Access vector: Local
Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: None
Availability: None

Ссылки

CVE-2016-6494 https://nvd.nist.gov/vuln/detail/CVE-2016-6494

Ссылки1

ALT-PU-2016-3267 https://errata.altlinux.org/ALT-PU-2016-3267

Связанные уязвимости

CVE-2016-6494

CVSS3: 5.5

ubuntu

около 10 лет назад

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

CVE-2016-6494

CVSS3: 4

redhat

больше 10 лет назад

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

CVE-2016-6494

CVSS3: 5.5

nvd

около 10 лет назад

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

CVE-2016-6494

CVSS3: 5.5

debian

около 10 лет назад

The client in MongoDB uses world-readable permissions on .dbshell hist ...

GHSA-j4pw-hgvj-fq4w

CVSS3: 5.5

github

больше 4 лет назад

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.