Security Bulletin: IBM Security Guardium is affected by a mongodb-driver-legacy-4.1.1.jar vulnerability (CVE-2021-20328)

Summary IBM Security Guardium has fixed this vulnerability Vulnerability Details CVEID: CVE-2021-20328 DESCRIPTION: MongoDB Java driver is vulnerable to a man-in-the-middle attack, caused by improper host name verification on the KMS server's certificate. An attacker could exploit this...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.5.0) +15 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver-legacy (>=3.12.0, <=3.12.7)

org.mongodb:mongodb-driver-legacy MAVEN version =3.12.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =1.0.0-m4, =1.0.0-m4, =1.0.0-m4, =3.3.0-beta.3, =4.3.15 and more Source cves: CVE-2021-20328 Source advisory: GHSA-RGHW-6PX2-FGWChttps://vulners.com/github/...

org.mongojack:mongojack (2.10.1), org.openprovenance.prov:prov-service-translation (>=2.0.4, <=2.2.1) +6 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver-legacy (3.11.0)

org.mongodb:mongodb-driver-legacy MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mongodb:mongodb-driver-legacy and may be impacted: - org.mongojack:mongojack 2.10.1 - org.openprovenance.prov:prov-service-translation =2.0.4,...

com.airbus-cyber-security.graylog:graylog-plugin-aggregation-count (>=4.0.0, <=4.1.1), com.airbus-cyber-security.graylog:graylog-plugin-alert-wizard (>=4.0.0, <=4.5.0) +15 more potentially affected by CVE-2021-20328 via org.mongodb:mongodb-driver-legacy (>=3.12.0, <=3.12.7)

org.mongodb:mongodb-driver-legacy MAVEN version =3.12.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1, =1.0.0-m4, =1.0.0-m4, =1.0.0-m4, =3.3.0-beta.3, =4.3.15 and more Source cves: CVE-2021-20328 Source advisory: MEND:CVE-2021-20328https://vulners.com/mend/ME...