7 matches found
Linux Distros Unpatched Vulnerability : CVE-2021-32050
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published...
@36node/template-service (>=0.17.6, <=0.17.9), @88bens/mongoose-multi (2.0.3) +568 more potentially affected by CVE-2021-32050 via mongodb (>=3.6.0, <=3.6.9)
mongodb NPM version =3.6.0, =0.17.6, =3.7.0, =1.0.0, =0.7.0, =2.1.0, =1.1.66, =2.9.8, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.2.0, =3.3.3 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...
@3kles/3kles-coremongodb (>=1.2.3, <=1.3.1), @3kles/storagebox-common (1.0.3) +756 more potentially affected by CVE-2021-32050 via mongodb (>=4.0.0-beta.1, <=4.16.0)
mongodb NPM version =4.0.0-beta.1, =1.2.3, =2.0.1, =0.0.1-alpha.89, =0.0.1-alpha.89, =0.0.3, =0.1.66, =0.5.17, =3.0.0-beta.3, =0.0.1002, =0.0.7, =0.0.1000, =0.0.2, =0.0.1, =0.0.1000 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...
@a-la-fois/api (>=0.0.25, <=0.0.39), @a-la-fois/doc-client (>=0.0.1-alpha.89, <=0.0.39) +174 more potentially affected by CVE-2021-32050 via mongodb (>=5.0.0, <=5.7.0)
mongodb NPM version =5.0.0, =0.0.25, =0.0.1-alpha.89, =0.0.25, =0.0.1, =0.0.25, =0.3.1, =0.8.2, =3.12.0, =1.0.0, =2.0.0-beta.7, =1.0.1, =0.0.0, =1.0.2, =1.3.4 and more Source cves: CVE-2021-32050 Source advisory: OSV:GHSA-VXVM-QWW3-2FH7...
CVE-2021-32050
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...
UBUNTU-CVE-2021-32050
Some MongoDB Drivers may erroneously publish events containing authentication-related data to a command listener configured by an application. The published events may contain security-sensitive data when specific authentication-related commands are executed. Without due care, an application may...
CVE-2021-32050
CVE-2021-32050 concerns MongoDB drivers that may publish authentication-related data to a configurable command listener, risking exposure of sensitive information when specific authentication commands execute. The issue affects multiple drivers to varying versions (e.g., C Driver <1.17.7, PHP ...