Описание
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
Уязвимые конфигурации
Конфигурация 1Версия от 7.0.0 (включая) до 7.0.23 (исключая)Версия от 8.0.0 (включая) до 8.0.27 (исключая)
Одно из
cpe:2.3:a:mongodb:ops_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:mongodb:ops_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00141
Низкий
3.1 Low
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-639
Связанные уязвимости
CVSS3: 3.1
github
около 1 месяца назад
An authenticated Ops Manager user with a read-only project role can retrieve a daily host monitoring record associated with a different project when they possess the required record identifier. Insufficient ownership validation can expose deployment metadata, including host and configuration details.
CVSS3: 6.5
altlinux
22 дня назад
ALT-PU-2026-18558: package `mongo7.0` update to version 7.0.45-alt1
EPSS
Процентиль: 3%
0.00141
Низкий
3.1 Low
CVSS3
4.3 Medium
CVSS3
Дефекты
CWE-639