Lucene search
CVE-2021-20327
A vulnerability in Node.js mongodb-client-encryption module version 1.2.0 allows interception of traffic to KMS service, making client-side field level encryption ineffectiv
Show more
| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | Improper Certificate Validation | 12 Apr 202118:50 | – | nodejs |
 | mongodb-client-encryption vulnerable to Improper Certificate Validation | 12 Apr 202118:51 | – | osv |
| CVE-2021-20327 | 25 Feb 202117:15 | – | osv |
 | Design/Logic Flaw | 25 Feb 202117:15 | – | prion |
 | Man-in-the-Middle (MitM) | 26 Feb 202107:00 | – | veracode |
 | mongodb-client-encryption vulnerable to Improper Certificate Validation | 12 Apr 202118:51 | – | github |
 | CVE-2021-20327 MongoDB Node.js client side field level encryption library may not be validating KMS certificate | 25 Feb 202116:25 | – | cvelist |
 | CVE-2021-20327 | 25 Feb 202117:15 | – | cve |
 | MongoDB Node.js client side field level encryption library may not be validating KMS certificate | 25 Feb 202100:00 | – | mongodb |
Node
| Source | Link |
|---|---|
| jira | www.jira.mongodb.org/browse/NODE-3125 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo25 Feb 2021 17:15Current
CVSS24.3
CVSS36.8
EPSS0.00125