Skip to content
OpenAdvisories

Product · MongoDB

MongoDB Ops Manager

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2023-4009

    Privilege Escalation for Project Owner and Project User Admin Roles in Ops Manager

    In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17 it is possible for an authenticated user with project owner or project user admin access to generate an API key with the privileges of org owner resulting in privilege escalation.

    MongoDB MongoDB Ops Manager
  • High 8.1
    CVE-2020-7927

    Potential privilege escalation in Ops Manager API

    Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role privilege. This issue affects MongoDB Ops Manager v4.2 versions prior to and including 4.2.17, MongoDB Ops Manager v4.3 ve…

    MongoDB MongoDB Ops Manager