Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-6915

Опубликовано: 29 апр. 2026
Источник: nvd
CVSS3: 6.3
CVSS3: 4.3
EPSS Низкий

Описание

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 7.0.0 (включая) до 7.0.32 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.0.0 (включая) до 8.0.21 (исключая)
cpe:2.3:a:mongodb:mongodb:*:*:*:*:-:*:*:*
Версия от 8.2.0 (включая) до 8.2.7 (исключая)

EPSS

Процентиль: 6%
0.00167
Низкий

6.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVSS3: 6.3
ubuntu
3 месяца назад

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

CVSS3: 6.3
redhat
3 месяца назад

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

CVSS3: 6.3
debian
3 месяца назад

An authorization flaw in the user management command could allow an au ...

CVSS3: 6.3
redos
4 дня назад

Уязвимость mongodb-org

CVSS3: 6.3
github
3 месяца назад

An authorization flaw in the user management command could allow an authenticated user to make limited changes to authentication-related data associated with another user account. This could affect how authentication is performed for the impacted account.

EPSS

Процентиль: 6%
0.00167
Низкий

6.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-1284