2 matches found
GHSA-RJMF-P882-645M mongodb-client-encryption vulnerable to Improper Certificate Validation
A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...
6.8CVSS6.4AI score0.00204EPSS
SaveExploits0References5
Design/Logic Flaw
A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and th...
4.3CVSS6.4AI score0.00204EPSS
SaveExploits0References1Affected Software1
20