Lucene search
+L

6 matches found

OSV
OSV
added 2026/07/22 8:16 p.m.6 views

UBUNTU-CVE-2026-13061

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

5.3CVSS5.9AI score0.00162EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/22 7:19 p.m.118 views

CVE-2026-13061

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

5.3CVSS5.2AI score0.00162EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/22 7:19 p.m.128 views

CVE-2026-13061

CVE-2026-13061 affects MongoDB: an authenticated user may access session metadata of other users via the $listSessions aggregation stage. Impacted data includes active session IDs, usernames, and activity timestamps, indicating an access-control weakness that ordinarily requires cluster‑level adm...

5.3CVSS5.3AI score0.00162EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/22 7:19 p.m.37 views

CVE-2026-13061 Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

5.3CVSS0.00162EPSS
SaveExploits0References1
MongoDB
MongoDB
added 2026/07/22 7:19 p.m.8 views

Improper Access Control Allowing Cross-User Session Metadata Disclosure in $listSessions Aggregation Stage

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

5.3CVSS5.2AI score0.00162EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/22 12:0 a.m.11 views

PT-2026-63465

An authenticated user may be able to view session metadata belonging to other users on the system through the $listSessions aggregation stage. This information is normally restricted to users with cluster-level administrative privileges, and includes active session identifiers, associated...

5.3CVSS5.2AI score0.00162EPSS
SaveExploits0References2
Rows per page
Query Builder