Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-7921HistoryMay 06, 2020 - 3:15 p.m.
CVE-2020-7921
2020-05-0615:15:00
Debian Security Bug Tracker
security-tracker.debian.org
9
0.001 Low
EPSS
Percentile
22.7%
Improper serialization of internal state in the authorization subsystem in MongoDB Server’s authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechanisms following administrative action. This issue affects: MongoDB Inc. MongoDB Server 4.2 versions prior to 4.2.3; 4.0 versions prior to 4.0.15; 4.3 versions prior to 4.3.3; 3.6 versions prior to 3.6.18.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | mongodb | <= 1:3.2.11-2+deb9u1 | mongodb_1:3.2.11-2+deb9u1_all.deb |
Related
nessus
nessus
osv
osv
CVE-2020-7921
2020-05-06 15:15:11
BIT-mongodb-2020-7921
2024-03-06 10:59:14
redhatcve
redhatcve
CVE-2020-7921
2020-06-18 14:36:57
prion
prion
Authorization
2020-05-06 15:15:00
cve
cve
CVE-2020-7921
2020-05-06 15:15:11
nvd
nvd
CVE-2020-7921
2020-05-06 15:15:11
openvas
openvas
mongodb
mongodb
CVE-2020-7921
2020-05-06 14:39:36
ibm
ibm
freebsd
freebsd
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2020-7921
2020-05-06 00:00:00