Administrative action may disable enforcement of per-user IP whitelisting

🗓️ 06 May 2020 11:00:00Reported by MongoDBType

Improper serialization in MongoDB Server's authorization subsystem allows bypass of IP whitelisting protection mechanism

Reporter	Title	Published	Views	Family All 33
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is vulnerable to a MongoDB vulnerability (CVE-2020-7921)	27 Sep 202018:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jQuery, Spring, Dom4j, MongoDB, Linux Kernel, Targetcli-fb, Jackson, Node.js, and Apache Commons affect IBM Spectrum Protect Plus	20 Nov 202020:41	–	ibm
CNVD	MongoDB Server Security Mechanism Bypass Vulnerability	7 May 202000:00	–	cnvd
CVE	CVE-2020-7921	6 May 202014:55	–	cve
Cvelist	CVE-2020-7921 Administrative action may disable enforcement of per-user IP whitelisting	6 May 202014:55	–	cvelist
FreeBSD	MongoDB -- Ensure RoleGraph can serialize authentication restrictions to BSON	10 Jan 202000:00	–	freebsd
Debian CVE	CVE-2020-7921	6 May 202014:55	–	debiancve
Tenable Nessus	Dell Wyse Management Suite < 3.2 Multiple Vulnerabilities (DSA-2021-070)	7 Apr 202100:00	–	nessus
Tenable Nessus	FreeBSD : MongoDB -- Ensure RoleGraph can serialize authentication restrictions to BSON (d0be8e1f-b19a-11ea-94aa-b827eb2f57d4)	30 Jun 202000:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2020-7921	19 Aug 202500:00	–	nessus