Lucene search

K
osvGoogleOSV:USN-5052-1
HistoryAug 26, 2021 - 1:55 a.m.

mongodb vulnerability

2021-08-2601:55:29
Google
osv.dev
6
mongodb
session validation
elevated privileges
remote attacker
software

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

44.1%

MongoDB would fail to properly invalidate existing sessions for deleted
users. This could allow a remote authenticated attacker to gain elevated
privileges if their user account was recreated with elevated privileges.

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

44.1%