Описание
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:mongodb:mongodb:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:2.4.3:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:2.4.4:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:mongodb:2.5.0:*:*:*:*:*:*:*
EPSS
Процентиль: 63%
0.00456
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
ubuntu
больше 12 лет назад
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
debian
больше 12 лет назад
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authen ...
github
больше 3 лет назад
MongoDB 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allows remote authenticated users to obtain internal system privileges by leveraging a username of __system in an arbitrary database.
EPSS
Процентиль: 63%
0.00456
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264