Поиск уязвимостей
Количество 9
Количество 9
CVE-2023-1409
If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.
CVE-2023-1409
If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.
CVE-2023-1409
If the MongoDB Server running on Windows or macOS is configured to use ...
GHSA-pjfq-h6gx-wrcf
If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.
BDU:2023-04979
Уязвимость системы управления базами данных MongoDB, связанная с некорректной проверкой подлинности сертификата клиента, позволяющая нарушителю установить TLS-соединение с сервером
ALT-PU-2023-8767
ALT-PU-2023-8767: package `mongo6.0` update to version 6.0.7-alt1
ALT-PU-2023-8673
ALT-PU-2023-8673: package `mongo4.4` update to version 4.4.23-alt1
ALT-PU-2023-8580
ALT-PU-2023-8580: package `mongo4.4` update to version 4.4.23-alt1
ALT-PU-2023-8519
ALT-PU-2023-8519: package `mongo6.0` update to version 6.0.9-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-1409 If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
 | CVE-2023-1409 If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
| CVE-2023-1409 If the MongoDB Server running on Windows or macOS is configured to use ... | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
| GHSA-pjfq-h6gx-wrcf If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions. | CVSS3: 5.3 | 0% Низкий | около 3 лет назад |
 | BDU:2023-04979 Уязвимость системы управления базами данных MongoDB, связанная с некорректной проверкой подлинности сертификата клиента, позволяющая нарушителю установить TLS-соединение с сервером | CVSS3: 5.3 | 0% Низкий | больше 3 лет назад |
| ALT-PU-2023-8767 ALT-PU-2023-8767: package `mongo6.0` update to version 6.0.7-alt1 | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
| ALT-PU-2023-8673 ALT-PU-2023-8673: package `mongo4.4` update to version 4.4.23-alt1 | CVSS3: 7.5 | 0% Низкий | больше 3 лет назад |
| ALT-PU-2023-8580 ALT-PU-2023-8580: package `mongo4.4` update to version 4.4.23-alt1 | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
| ALT-PU-2023-8519 ALT-PU-2023-8519: package `mongo6.0` update to version 6.0.9-alt1 | CVSS3: 7.5 | около 3 лет назад |
Уязвимостей на страницу