Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wx8h-2jpv-xvwr

Опубликовано: 12 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.8
CVSS3: 5.5

Описание

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnostic output. A local user with read access to the terminal session or the log directory, or anyone with access to a location where those logs are subsequently collected, could obtain those values.

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnostic output. A local user with read access to the terminal session or the log directory, or anyone with access to a location where those logs are subsequently collected, could obtain those values.

EPSS

Процентиль: 2%
0.00113
Низкий

6.8 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-532

Связанные уязвимости

CVSS3: 5.5
nvd
6 дней назад

MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk. Certain connection settings were written without redaction, so authentication material supplied by the operator could appear in plaintext in that diagnostic output. A local user with read access to the terminal session or the log directory, or anyone with access to a location where those logs are subsequently collected, could obtain those values.

CVSS3: 5.5
debian
6 дней назад

MongoDB SQL Schema Builder CLI records its startup configuration to st ...

EPSS

Процентиль: 2%
0.00113
Низкий

6.8 Medium

CVSS4

5.5 Medium

CVSS3

Дефекты

CWE-532