Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h22h-g2cf-r8hr

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.3
CVSS3: 4.2

Описание

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

EPSS

Процентиль: 2%
0.00115
Низкий

2.3 Low

CVSS4

4.2 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.2
ubuntu
30 дней назад

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

CVSS3: 4.2
nvd
30 дней назад

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow authentication through a method the administrator intended to disable.

CVSS3: 4.2
debian
30 дней назад

An issue in MongoDB Server could allow a party with a valid client cer ...

EPSS

Процентиль: 2%
0.00115
Низкий

2.3 Low

CVSS4

4.2 Medium

CVSS3

Дефекты

CWE-863