Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vjcf-4g29-6hfr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.11; v3.6 versions prior to 3.6.14; v3.4 versions prior to 3.4.22.

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects: MongoDB Inc. MongoDB Server v4.0 versions prior to 4.0.11; v3.6 versions prior to 3.6.14; v3.4 versions prior to 3.4.22.

EPSS

Процентиль: 31%
0.0012
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-20
CWE-732

Связанные уязвимости

CVSS3: 5.3
ubuntu
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

CVSS3: 4.2
redhat
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

CVSS3: 5.3
nvd
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init scripts allow users with write access to the PID file to insert arbitrary PIDs to be killed when the root user stops the MongoDB process via SysV init. This issue affects MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14; MongoDB Server v3.4 versions prior to 3.4.22.

CVSS3: 5.3
debian
больше 6 лет назад

Incorrect scoping of kill operations in MongoDB Server's packaged SysV ...

EPSS

Процентиль: 31%
0.0012
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-20
CWE-732