CVE-2017-18381

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

Default credentials

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

CVE-2017-18381

CVE-2017-18381 concerns Open edX installations prior to 2017-01-10, where the installation process exposed a MongoDB instance to external connections using default credentials. This creates a risk of unauthorized access to the database. The connected Red Hat and other vulnerability records corrob...

CVE-2017-18381

The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials...

PT-2019-8316 · Edx +1 · Open Edx +1

Name of the Vulnerable Software and Affected Versions: Open edX versions prior to 2017-01-10 Description: The installation process exposes a MongoDB instance to external connections with default credentials. This issue may allow unauthorized access to the database. Recommendations: For versions...

Qualys Policy Compliance Notification: Policy Library Updates (June)

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...

MongoDB Server Unauthorized Access Vulnerability

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . A security vulnerability exists in MongoDB Server versions 3.0.0 through 3.0....

CVE-2015-7882

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

Input validation

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

UBUNTU-CVE-2015-7882

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882 Authentication bypass when using LDAP authentication in MongoDB Enterprise Server

Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to gain unauthorized access...

CVE-2015-7882

CVE-2015-7882 affects MongoDB Server 3.0.0–3.0.6, where improper handling of LDAP authentication can allow an unauthenticated client to gain unauthorized access. The CNVD entry confirms versions 3.0.0 through 3.0.6 are vulnerable and can lead to unauthorized access; other connected records reiter...

CVE-2015-7882

Removed by vendor...

MongoDB 2.4 / 2.6 Denial of Service Vulnerability

The version of the remote MongoDB server is 2.4 or 2.6. It is, therefore, affected by a denial of service vulnerability in mongod. A remote, unauthenticated attacker can exploit this, via authenticating against a non-existent database to cause a memory exhaustion, denying service to legitimate...

PT-2019-4123 · Microsoft +2 · Windows +3

Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 4.0.11 MongoDB Server versions prior to 3.6.14 MongoDB Server versions prior to 3.4.22 Description: The issue is related to insufficient access control in the MongoDB database management system. An unprivilege...

Unprotected MongoDB leaks 188m users’ data from sensitive search engine

By Waqas Another day, another data breach; this time, a security researcher has discovered a massive trove of data hosted on an unprotected MongoDB database available for anyone to access without any authentication. Discovered by Comparitech's researcher Bob Diachenko on June 18, 2019; the databa...

MongoDB 3.0.x < 3.0.7 / 3.1.x < 3.1.9 Authentication Bypass

The version of the remote MongoDB server is 3.0.x prior to 3.0.7, 3.1.x prior to 3.1.9. It is, therefore, affected by an unspecified flaw in LDAP authentication. An attacker may exploit this to gain unauthorized access to a MongoDB instance or cluster. Note that Nessus has not tested for these...

CVE-2019-4383

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle or MongoDB databases, a redirected restore operation may result in an escalation of user privileges. IBM X-Force ID: 162165...

CVE-2019-4357

When using IBM Spectrum Protect Plus 10.1.0, 10.1.2, and 10.1.3 to protect Oracle, DB2 or MongoDB databases, a redirected restore operation specifying a target path may allow execution of arbitrary code on the system. IBM X-Force ID: 161667,...