Lucene search

CVE-2021-20334

🗓️ 06 Apr 2021 17:12:15Reported by mongodbType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 135 Views

A local access vulnerability allows arbitrary software execution in MongoDB Compas

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2021-20334 Local privilege escalation in MongoDB Compass for Windows	6 Apr 202116:45	–	cvelist
Prion	Design/Logic Flaw	6 Apr 202117:15	–	prion
MongoDB	Local privilege escalation in MongoDB Compass for Windows	6 Apr 202100:00	–	mongodb
NVD	CVE-2021-20334	6 Apr 202117:15	–	nvd

Nvd

Node

mongodb compassRange1.3.0–1.25.0

AND

microsoft windowsMatch-

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "MongoDB Compass",
    "vendor": "MongoDB Inc.",
    "versions": [
      {
        "changes": [
          {
            "at": "1.25.0",
            "status": "unaffected"
          }
        ],
        "lessThan": "1.x*",
        "status": "affected",
        "version": "1.3.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jira	www.jira.mongodb.org/browse/COMPASS-4510

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Apr 2021 17:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS24.6

CVSS34.8 - 7.8

EPSS0.00097

CWE-269