Lucene search
K

8 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2024-6375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either...

6.5CVSS7.8AI score0.00376EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/07/02 12:0 a.m.16 views

MongoDB Missing Authorization Check Vulnerability (SERVER-79327) - Windows

MongoDB is prone to a missing authorization check vulnerability in refine collection shard key. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

6.5CVSS8.3AI score0.00376EPSS
Exploits0References1
NVD
NVD
added 2024/07/01 3:15 p.m.16 views

CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS0.00376EPSS
Exploits0References1
OSV
OSV
added 2024/07/01 3:15 p.m.14 views

CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS6.8AI score
Exploits0References1
OSV
OSV
added 2024/07/01 3:15 p.m.1 views

UBUNTU-CVE-2024-6375

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS7.3AI score0.00376EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/07/01 2:40 p.m.26 views

CVE-2024-6375 Missing authorization check may lead to shard key refinement

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

5.4CVSS7AI score0.00376EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/01 2:40 p.m.23 views

CVE-2024-6375 Missing authorization check may lead to shard key refinement

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

5.4CVSS0.00376EPSS
Exploits0References1
MongoDB
MongoDB
added 2024/07/01 2:40 p.m.48 views

Missing authorization check may lead to shard key refinement

A command for refining a collection shard key is missing an authorization check. This may cause the command to run directly on a shard, leading to either degradation of query performance, or to revealing chunk boundaries through timing side channels. This affects MongoDB Server v5.0 versions, pri...

6.5CVSS6.9AI score0.00376EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder