mongodb-client-encryption

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.4

CVE-2021-20327

MongoDB Node.js client side field level encryption library may not be validating KMS certificate

A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of tra…

MongoDB MongoDB Node.js Driver mongodb-client-encryption module mongodb-client-encryption npm

Feb 25, 2021