Lucene search
GoogleOSV:CVE-2020-7921HistoryMay 06, 2020 - 3:15 p.m.
CVE-2020-7921
2020-05-0615:15:11
Google
osv.dev
9
Improper serialization of internal state in the authorization subsystem in MongoDB Server’s authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechanisms following administrative action. This issue affects MongoDB Server v4.2 versions prior to 4.2.3; MongoDB Server v4.0 versions prior to 4.0.15; MongoDB Server v4.3 versions prior to 4.3.3and MongoDB Server v3.6 versions prior to 3.6.18.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mongo | eq | r4.2.2 | |
| mongo | eq | r4.2.2-rc1 | |
| mongo | eq | r4.2.1 | |
| mongo | eq | r4.2.0 | |
| mongo | eq | r4.2.3-rc0 | |
| mongo | eq | r4.2.1-rc0 | |
| mongo | eq | r4.2.2-rc0 |
References
Related
cve
cve
CVE-2020-7921
2020-05-06 15:15:11
debiancve
debiancve
CVE-2020-7921
2020-05-06 15:15:00
nessus
nessus
prion
prion
Authorization
2020-05-06 15:15:00
redhatcve
redhatcve
CVE-2020-7921
2020-06-18 14:36:57
nvd
nvd
CVE-2020-7921
2020-05-06 15:15:11
openvas
openvas
mongodb
mongodb
CVE-2020-7921
2020-05-06 14:39:36
ibm
ibm
osv
osv
BIT-mongodb-2020-7921
2024-03-06 10:59:14
freebsd
freebsd
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2020-7921
2020-05-06 00:00:00