CVE-2019-2389

🗓️ 30 Aug 2019 14:41:23Reported by mongodbType

Incorrect scoping of kill operations in MongoDB Server's packaged SysV init script

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in MongoDB server affect IBM Cloud App Management	23 Oct 201916:05	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in MongoDB affects IBM Spectrum Protect Plus (CVE-2019-2389)	12 Jun 202020:16	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability affects IBM Cloud Private Core Services (CVE-2019-2390, CVE-2019-2389)	23 Nov 201914:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in MongoDB affects IBM Watson Studio Local	20 Dec 201908:47	–	ibm
FreeBSD	mongodb -- Our init scripts check /proc/[pid]/stat should validate that `(${procname})` is the process' command name.	6 Aug 201900:00	–	freebsd
CNVD	MongoDB Server Input Validation Error Vulnerability	4 Sep 201900:00	–	cnvd
Cvelist	CVE-2019-2389 Process termination via PID file manipulation	30 Aug 201914:41	–	cvelist
Debian CVE	CVE-2019-2389	30 Aug 201914:41	–	debiancve
EUVD	EUVD-2019-12031	7 Oct 202500:30	–	euvd
Tenable Nessus	FreeBSD : mongodb -- Our init scripts check /proc/[pid]/stat should validate that `(${procname})` is the process' command name. (273c6c43-e3ad-11e9-8af7-08002720423d)	14 Oct 201900:00	–	nessus

NVD

Node

mongodb mongodbRange3.4.0–3.4.22

mongodb mongodbRange3.6.0–3.6.14

mongodb mongodbRange4.0.0–4.0.11

[
  {
    "defaultStatus": "unaffected",
    "product": "MongoDB Server",
    "vendor": "MongoDB Inc.",
    "versions": [
      {
        "lessThan": "4.0.11",
        "status": "affected",
        "version": "4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "3.6.14",
        "status": "affected",
        "version": "3.6",
        "versionType": "custom"
      },
      {
        "lessThan": "3.4.22",
        "status": "affected",
        "version": "3.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jira	www.jira.mongodb.org/browse/SERVER-40563

21 Nov 2024 04:40Current

4.6Medium risk

Vulners AI Score4.6

CVSS 21.9

CVSS 3.14.2 - 5.3

EPSS0.0012