Lucene search
MongoDBMONGODB:CVE-2023-0342HistoryJun 09, 2023 - 8:38 a.m.
CVE-2023-0342
2023-06-0908:38:58
www.mongodb.com
17
mongodb
ops manager
diagnostics archive
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.014
Percentile
86.6%
MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This issue affects MongoDB Ops Manager v5.0 prior to 5.0.21 and MongoDB Ops Manager v6.0 prior to 6.0.12
Related
nvd
nvd
CVE-2023-0342
2023-06-09 09:15:09
cvelist
cvelist
cve
cve
CVE-2023-0342
2023-06-09 09:15:09
packetstorm
packetstorm
MongoDB Ops Manager Diagnostic Archive Sensitive Information Retriever
2024-08-31 00:00:00
prion
prion
Default credentials
2023-06-09 09:15:00
metasploit
metasploit
MongoDB Ops Manager Diagnostic Archive Sensitive Information Retriever
2024-03-07 22:05:25
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up 04/19/24
2024-04-19 18:42:39
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.014
Percentile
86.6%
Related for MONGODB:CVE-2023-0342