Low WID-SEC-2023-2208 1 CVE

MongoDB: Schwachstelle ermöglicht Offenlegung von Informationen

Published Aug 29, 2023 · Updated May 20, 2025 · Revision 2 · de-DE

Vendor: Debian Product: Linux Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann eine Schwachstelle in MongoDB ausnutzen, um Informationen offenzulegen.

Product

MongoDB ist ein Open-Source-Dokumentendatenbank.

Vulnerabilities 1

Medium 4.2

CVE-2021-32050

Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application

Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed.…

MongoDB MongoDB C Driver MongoDB PHP Driver MongoDB Node.js Driver Debian Ubuntu npm Packagist SwiftURL

Aug 29, 2023

Revision history

2025-05-20 #2
Neue Updates von Debian aufgenommen
2023-08-29 #1
Initiale Fassung

References

MongoDB Security Notification vom 2023-08-29
https://jira.mongodb.org/browse/PHPC-1869
Debian Security Advisory DLA-4175 vom 2025-05-20
https://lists.debian.org/debian-lts-announce/2025/05/msg00027.html