CVE-2017-18381

2019-07-3019:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.8%

JSON

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials.

CPENameOperatorVersion
edx-platformeqhotfix-2016-03-17
edx-platformeqpatch-2016-04-14
edx-platformeqhotfix-2014-01-16
edx-platformeqprod-pre-storage-model
edx-platformeqhotfix-2015-12-09-a
edx-platformeqrelease-2016-03-08
edx-platformeqrelease-2016-07-26
edx-platformeqrelease-2017-01-04
edx-platformeqhotfix-2015-06-29
edx-platformeqpatch-2015-12-21

Name	Operator	Version
edx-platform	eq	hotfix-2016-03-17
edx-platform	eq	patch-2016-04-14
edx-platform	eq	hotfix-2014-01-16
edx-platform	eq	prod-pre-storage-model
edx-platform	eq	hotfix-2015-12-09-a
edx-platform	eq	release-2016-03-08
edx-platform	eq	release-2016-07-26
edx-platform	eq	release-2017-01-04
edx-platform	eq	hotfix-2015-06-29
edx-platform	eq	patch-2015-12-21