Поиск уязвимостей
Количество 15
Количество 15
CVE-2024-6375
A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3.
CVE-2024-6375
A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3.
CVE-2024-6375
A command for refining a collection shard key is missing an authorizat ...
GHSA-85f9-vc47-9pr8
A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3.
BDU:2025-03802
Уязвимость сервера системы управления базами данных MongoDB, связанная с отсутствием процедуры авторизации, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации
ALT-PU-2024-10759
ALT-PU-2024-10759: package `mongo5.0` update to version 5.0.28-alt1
ROS-20250326-02
Уязвимость mongodb-org
ALT-PU-2024-18039
ALT-PU-2024-18039: package `mongo5.0` update to version 5.0.24-alt1
ALT-PU-2024-18023
ALT-PU-2024-18023: package `mongo6.0` update to version 6.0.13-alt1
ALT-PU-2023-8768
ALT-PU-2023-8768: package `mongo6.0` update to version 6.0.11-alt1
ALT-PU-2023-8679
ALT-PU-2023-8679: package `mongo7.0` update to version 7.0.4-alt1
ALT-PU-2023-8676
ALT-PU-2023-8676: package `mongo5.0` update to version 5.0.22-alt1
ALT-PU-2024-11017
ALT-PU-2024-11017: package `mongo5.0` update to version 5.0.28-alt0.p10.1
ALT-PU-2024-11019
ALT-PU-2024-11019: package `mongo6.0` update to version 6.0.16-alt0.p10.1
ALT-PU-2024-10822
ALT-PU-2024-10822: package `mongo6.0` update to version 6.0.16-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-6375 A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-6375 A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3. | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| CVE-2024-6375 A command for refining a collection shard key is missing an authorizat ... | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
| GHSA-85f9-vc47-9pr8 A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, prior to 5.0.22, MongoDB Server v6.0 versions, prior to 6.0.11 and MongoDB Server v7.0 versions prior to 7.0.3. | CVSS3: 5.4 | 0% Низкий | больше 2 лет назад |
 | BDU:2025-03802 Уязвимость сервера системы управления базами данных MongoDB, связанная с отсутствием процедуры авторизации, позволяющая нарушителю оказать воздействие на конфиденциальность и доступность защищаемой информации | CVSS3: 6.5 | 0% Низкий | больше 3 лет назад |
| ALT-PU-2024-10759 ALT-PU-2024-10759: package `mongo5.0` update to version 5.0.28-alt1 | CVSS3: 6.5 | 0% Низкий | больше 2 лет назад |
 | ROS-20250326-02 Уязвимость mongodb-org | CVSS3: 6.5 | 0% Низкий | больше 1 года назад |
| ALT-PU-2024-18039 ALT-PU-2024-18039: package `mongo5.0` update to version 5.0.24-alt1 | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
| ALT-PU-2024-18023 ALT-PU-2024-18023: package `mongo6.0` update to version 6.0.13-alt1 | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
| ALT-PU-2023-8768 ALT-PU-2023-8768: package `mongo6.0` update to version 6.0.11-alt1 | CVSS3: 6.5 | 0% Низкий | около 3 лет назад |
| ALT-PU-2023-8679 ALT-PU-2023-8679: package `mongo7.0` update to version 7.0.4-alt1 | CVSS3: 6.5 | 0% Низкий | почти 3 года назад |
| ALT-PU-2023-8676 ALT-PU-2023-8676: package `mongo5.0` update to version 5.0.22-alt1 | CVSS3: 6.5 | 0% Низкий | около 3 лет назад |
| ALT-PU-2024-11017 ALT-PU-2024-11017: package `mongo5.0` update to version 5.0.28-alt0.p10.1 | CVSS3: 7.8 | около 2 лет назад | |
| ALT-PU-2024-11019 ALT-PU-2024-11019: package `mongo6.0` update to version 6.0.16-alt0.p10.1 | CVSS3: 7.8 | около 2 лет назад | |
| ALT-PU-2024-10822 ALT-PU-2024-10822: package `mongo6.0` update to version 6.0.16-alt1 | CVSS3: 7.8 | больше 2 лет назад |
Уязвимостей на страницу