EUVD-2019-12028

Malware in sbrugna...

CLSA-2022-1668117586 Fix CVE(s): CVE-2019-2386

SECURITY UPDATE: After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new accounts, if those accounts reuse the names of deleted ones - debian/patches/CVE-2019-2386.patch: Validate...

Ubuntu 18.04 LTS / 20.04 LTS : MongoDB vulnerability (USN-5052-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5052-1 advisory. MongoDB would fail to properly invalidate existing sessions for deleted users. This could allow a remote authenticated attacker to gain elevated...

Security Bulletin: Vulnerabilities in MongoDB affects IBM Watson Studio Local

Summary Vulnerabilities in MongoDB affects IBM Watson Studio Local Vulnerability Details CVEID: CVE-2019-2386 DESCRIPTION: After user deletion in MongoDB Server the improper invalidation of authorization sessions allows an authenticated user's session to persist and become conflated with new...

PT-2019-16408

Name of the Vulnerable Software and Affected Versions MongoDB Server versions prior to 4.0.9 MongoDB Server versions prior to 3.6.13 MongoDB Server versions prior to 3.4.22 Description The improper invalidation of authorization sessions in MongoDB Server allows an authenticated user's session to...