Описание
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by injecting a crafted server-first-message containing a controlled salt and low iteration count, then capturing the resulting client proof to perform offline password cracking. This vulnerability is mitigated by TLS, which is standard in production deployments.
A flaw was found in libmongoc's SCRAM authentication implementation. This flaw allows an unauthorized attacker in a man-in-the-middle position to bypass nonce validation by injecting a crafted server message. This enables the attacker to capture the client proof and perform offline password cracking. The vulnerability is mitigated by Transport Layer Security (TLS), which is commonly used in production deployments.
Отчет
This vulnerability is rated as Moderate severity because exploitation requires an active man-in-the-middle network position on an unencrypted connection and only yields cryptographic proof material that requires offline brute-force cracking rather than direct system compromise. In typical Red Hat deployments, communication with MongoDB servers is protected by TLS encryption, neutralizing the ability of an adversary to inspect or manipulate authentication handshakes. Applications connecting over unencrypted channels or untrusted networks remain susceptible to credential proof extraction if an attacker can alter the network traffic.
Дополнительная информация
Статус:
EPSS
5.9 Medium
CVSS3
Связанные уязвимости
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by injecting a crafted server-first-message containing a controlled salt and low iteration count, then capturing the resulting client proof to perform offline password cracking. This vulnerability is mitigated by TLS, which is standard in production deployments.
A flaw in libmongoc's SCRAM authentication implementation caused the client to continue the authentication handshake and transmit the client proof even when a nonce mismatch was detected in the server's first message. An unauthorized party with a man-in-the-middle position could exploit this by injecting a crafted server-first-message containing a controlled salt and low iteration count, then capturing the resulting client proof to perform offline password cracking. This vulnerability is mitigated by TLS, which is standard in production deployments.
A flaw in libmongoc's SCRAM authentication implementation caused the c ...
EPSS
5.9 Medium
CVSS3