The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files...
5.5CVSS8.2AI score0.00367EPSS
SaveExploits0References3
OSV•added 2016/10/03 6:59 p.m.•5 views
UBUNTU-CVE-2016-6494
The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files...