MongoDB 日志信息泄露漏洞

🗓️ 29 Aug 2023 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 6 Views

MongoDB 信息泄露漏洞，可能将认证相关数据发布到应用配置的命令监听器，导致安全敏感数据泄露。

Reporter	Title	Published	Views	Family All 36
AstraLinux	Astra Linux - уязвимость в mongo-c-driver	20 May 202605:53	–	astralinux
BDU FSTEC	Vulnerability of PHP, C++, Swift, and Node.js drivers of the MongoDB database management system, related to the exposure of protected information, allowing attackers to gain unauthorized access to protected information.	31 Aug 202300:00	–	bdu_fstec
Circl	CVE-2021-32050	29 Aug 202320:17	–	circl
CNVD	MongoDB Information Disclosure Vulnerability (CNVD-2023-68220)	31 Aug 202300:00	–	cnvd
CVE	CVE-2021-32050	29 Aug 202315:24	–	cve
Cvelist	CVE-2021-32050 Some MongoDB Drivers may publish events containing authentication-related data to a command listener configured by an application	29 Aug 202315:24	–	cvelist
Debian	[SECURITY] [DLA 4175-1] mongo-c-driver security update	20 May 202519:14	–	debian
Debian CVE	CVE-2021-32050	29 Aug 202315:24	–	debiancve
Tenable Nessus	Debian dla-4175 : libbson-1.0-0 - security update	20 May 202500:00	–	nessus
Tenable Nessus	Dell Wyse Management Suite < 5.1 Multiple Vulnerabilities (DSA-2025-135)	3 Apr 202500:00	–	nessus

Source	Link
jira	www.jira.mongodb.org/browse/SWIFT-1229
jira	www.jira.mongodb.org/browse/CXX-2028
security	www.security.netapp.com/advisory/ntap-20231006-0001/
jira	www.jira.mongodb.org/browse/CDRIVER-3797
jira	www.jira.mongodb.org/browse/NODE-3356
jira	www.jira.mongodb.org/browse/PHPC-1869
cxsecurity	www.cxsecurity.com/cveshow/CVE-2021-32050/
vigilance	www.vigilance.fr/vulnerability/MongoDB-Drivers-information-disclosure-via-Events-Containing-Authentication-47224

20 Feb 2026 00:00Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.14.2 - 7.5

EPSS0.00048

SSVC

MongoDB 信息泄露漏洞认证数据命令监听器应用配置