Поиск уязвимостей
Количество 4
Количество 4
CVE-2019-2390
An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14 and MongoDB Server v3.4 prior to 3.4.22.
GHSA-59q4-q97g-jqjq
An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility.
BDU:2019-04702
Уязвимость документоориентированной системы управления базами данных MongoDB, связанная с недостатками разграничения доступа, позволяющая нарушителю выполнить произвольный код
ALT-PU-2019-4186
ALT-PU-2019-4186: package `mongo` update to version 4.0.11-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-2390 An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server to run attacker defined code as the user running the utility. This issue MongoDB Server v4.0 versions prior to 4.0.11; MongoDB Server v3.6 versions prior to 3.6.14 and MongoDB Server v3.4 prior to 3.4.22. | CVSS3: 7.8 | 1% Низкий | около 7 лет назад |
| GHSA-59q4-q97g-jqjq An unprivileged user or program on Microsoft Windows which can create OpenSSL configuration files in a fixed location may cause utility programs shipped with MongoDB server versions less than 4.0.11, 3.6.14, and 3.4.22 to run attacker defined code as the user running the utility. | CVSS3: 7.8 | 1% Низкий | больше 4 лет назад |
 | BDU:2019-04702 Уязвимость документоориентированной системы управления базами данных MongoDB, связанная с недостатками разграничения доступа, позволяющая нарушителю выполнить произвольный код | CVSS3: 6.1 | 1% Низкий | больше 7 лет назад |
| ALT-PU-2019-4186 ALT-PU-2019-4186: package `mongo` update to version 4.0.11-alt1 | CVSS3: 7.8 | больше 7 лет назад |
Уязвимостей на страницу