Lucene search
+L

46 matches found

attackerkb
attackerkb
•added 2021/08/02 3:30 p.m.•13 views

CVE-2021-20332

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

4.4CVSS5.5AI score0.00308EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2021/08/02 12:50 p.m.•2 views

CVE-2021-20332

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

5.1CVSS0.00308EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2021/08/02 12:50 p.m.•57 views

CVE-2021-20332 MongoDB Rust Driver may publish events containing authentication-related data to a connection pool event listener configured by an application

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

4.2CVSS4.9AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/02 12:00 a.m.•18 views

PT-2021-13891 · Mongodb · Mongodb Rust Driver

Name of the Vulnerable Software and Affected Versions: MongoDB Rust Driver versions 1.0.0 through 1.2.1 MongoDB Rust Driver version 2.0.0-alpha MongoDB Rust Driver version 2.0.0-alpha1 Description: The issue affects the MongoDB Rust Driver, where specific versions can include credentials used by...

4.4CVSS7.1AI score0.00308EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/02 12:00 a.m.•4 views

CVE-2021-20332: Exposure of Sensitive Information to an Unauthorized Actor

Specific MongoDB Rust Driver versions can include credentials used by the connection pool to authenticate connections in the monitoring event that is emitted when the pool is created. The user's logging infrastructure could then potentially ingest these events and unexpectedly leak the credential...

4.4CVSS5.7AI score0.00308EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/02 12:00 a.m.•19 views

MongoDB 信息泄露漏洞

MongoDB is a document-oriented database management system from the U.S.-based MongoDB, Inc. An information disclosure vulnerability exists in the MongoDB Rust Driver that stems from the fact that specific MongoDB Rust Driver versions can contain credentials used by connection pools to validate...

4.4CVSS5.1AI score0.00308EPSS
SaveExploits0References1
Rows per page
Query Builder