Skip to content
OpenAdvisories

Product · MongoDB

Atlas SQL JDBC Driver

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.0

    Atlas SQL JDBC driver loads a native library it did not write: NativeLoader tolerates a pre-existing libmongosqltranslate.so in a shared temp dir

    A local user with an ordinary account on the same host can place a file in a shared temporary location that the JDBC driver's native library loading routine will accept and load without verifying its origin. Loading the driver class in a Java application may …