Описание
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| mongodb | fixed | 1:2.6.12-3 | package | |
| mongodb | fixed | 1:2.4.10-5+deb8u1 | jessie | package |
Примечания
https://www.openwall.com/lists/oss-security/2016/07/29/4
EPSS
Связанные уязвимости
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.
ALT-PU-2016-3267: package `mongo` update to version 3.4.0-alt1.1
EPSS