Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gvrf-4h52-xwxp

Опубликовано: 13 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

EPSS

Процентиль: 51%
0.00279
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 1 года назад

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

CVSS3: 5.3
nvd
больше 1 года назад

"Hot" backup files may be downloaded by underprivileged users, if they are capable of acquiring a unique backup identifier. This issue affects MongoDB Enterprise Server v6.0 versions prior to 6.0.16, MongoDB Enterprise Server v7.0 versions prior to 7.0.11 and MongoDB Enterprise Server v7.3 versions prior to 7.3.3

CVSS3: 5.3
debian
больше 1 года назад

"Hot" backup files may be downloaded by underprivileged users, if they ...

CVSS3: 5.3
fstec
больше 1 года назад

Уязвимость компонента Hot Backup File системы управления базами данных MongoDB, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 51%
0.00279
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-285