Логотип exploitDog
bind:CVE-2023-1409
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-1409

Количество 5

Количество 5

ubuntu логотип

CVE-2023-1409

больше 2 лет назад

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.

CVSS3: 5.3
EPSS: Низкий
nvd логотип

CVE-2023-1409

больше 2 лет назад

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.

CVSS3: 5.3
EPSS: Низкий
debian логотип

CVE-2023-1409

больше 2 лет назад

If the MongoDB Server running on Windows or macOS is configured to use ...

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-pjfq-h6gx-wrcf

больше 2 лет назад

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.

CVSS3: 5.3
EPSS: Низкий
fstec логотип

BDU:2023-04979

почти 3 года назад

Уязвимость системы управления базами данных MongoDB, связанная с некорректной проверкой подлинности сертификата клиента, позволяющая нарушителю установить TLS-соединение с сервером

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-1409

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.

CVSS3: 5.3
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-1409

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.

CVSS3: 5.3
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-1409

If the MongoDB Server running on Windows or macOS is configured to use ...

CVSS3: 5.3
0%
Низкий
больше 2 лет назад
github логотип
GHSA-pjfq-h6gx-wrcf

If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely in other platforms (e.g. Linux), it is possible that client certificate validation may not be in effect, potentially allowing client to establish a TLS connection with the server that supplies any certificate. This issue affect all MongoDB Server v6.3 versions, MongoDB Server v5.0 versions v5.0.0 to v5.0.14 and all MongoDB Server v4.4 versions.

CVSS3: 5.3
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-04979

Уязвимость системы управления базами данных MongoDB, связанная с некорректной проверкой подлинности сертификата клиента, позволяющая нарушителю установить TLS-соединение с сервером

CVSS3: 5.3
0%
Низкий
почти 3 года назад

Уязвимостей на страницу