Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-20326

Опубликовано: 20 янв. 2021
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4.

A flaw was found in MongoDB. A user authorized to performing a specific type of "find" query could use this flaw to trigger a denial of service. The highest threat from this vulnerability is to system availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Advanced Cluster Management for Kubernetes 2mongodbNot affected
Red Hat OpenStack Platform 10 (Newton)mongodbOut of support scope
Red Hat Software Collectionsrh-mongodb36-mongodbNot affected
Red Hat Update Infrastructure 3 for Cloud ProvidersmongodbNot affected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=1955780mongodb: Authorized user may trigger denial of service via find query

EPSS

Процентиль: 59%
0.00948
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4.

CVSS3: 6.5
nvd
больше 5 лет назад

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4.

CVSS3: 6.5
debian
больше 5 лет назад

A user authorized to performing a specific type of find query may trig ...

CVSS3: 6.5
github
больше 4 лет назад

A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.4.

EPSS

Процентиль: 59%
0.00948
Низкий

6.5 Medium

CVSS3