CVE-2016-10572

mongodb-instance before 0.0.3 installs mongodb locally. mongodb-instance downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution RCE by swapping out the requested binary with an attacker controlled binary if the attacker ...

CVE-2016-10572

The vulnerability CVE-2016-10572 affects mongodb-instance prior to 0.0.3, where the application downloads binaries over HTTP. This insecure fetch enables MITM interference, potentially swapping the downloaded binary with a malicious one and enabling remote code execution on the host running mongo...