CVE-2023-0342: falha de baixa gravidade em MongoDB Ops Manager
MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
23Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendcvss 3.1epss 0.9%
da publicação à armano mesmo dia
Publicada no NVD9 de jun.
metasploit9 de jun.
MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N
Produtos afetados
MongoDB Inc. · MongoDB Ops ManagerCVEs relacionadas — MongoDB Ops Manager
No mesmo produto, das mais perigosas para as menos.
CVE-2020-7927HIGHPotential privilege escalation in Ops Manager APIEPSS 1.0%CVE-2019-2388MEDIUMPotential exposure of log information in Ops ManagerEPSS 1.0%CVE-2023-4009HIGHPrivilege Escalation for Project Owner and Project User Admin Roles in Ops ManagerEPSS 0.8%CVE-2021-20335MEDIUMSSL may be unexpectedly disabled during upgrade of multiple-server MongoDB Ops ManagerEPSS 0.1%