5.3
CVE-2023-0342
- EPSS 19.52%
- Veröffentlicht 09.06.2023 09:15:09
- Zuletzt bearbeitet 21.11.2024 07:37:00
- Quelle cna@mongodb.com
- Teams Watchlist Login
- Unerledigt Login
MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mongodb ≫ Ops Manager Server Version >= 5.0.0 < 5.0.21
Mongodb ≫ Ops Manager Server Version >= 6.0.0 < 6.0.12
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 19.52% | 0.951 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| cna@mongodb.com | 3.1 | 0.6 | 2.5 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
|
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.